EIP-2026-104550

This exploit triggers a stack-based buffer overflow in the IOBluetoothHCIUserClient::DispatchHCIReadLocalName() function on Mac OS X Yosemite (10.10), overwriting the stack canary to cause a kernel panic. It demonstrates a denial-of-service (DoS) condition via a crafted IOBluetoothCall structure.