EIP-2026-104578

This exploit leverages a stack overflow vulnerability in the `nfs_convert_old_nfs_args` function in the Mac OS X Lion kernel (xnu-1699.32.7 and earlier) to escalate privileges. It crafts a malicious NFS mount request with an oversized buffer to overwrite the stack and redirect execution to a shellcode that sets the UID to 0.