EIP-2026-104582

This exploit targets a format string vulnerability in `launchd` on macOS 10.4.6, leveraging environment variable manipulation and a malicious `.plist` file to achieve arbitrary code execution. It writes shellcode to a specific memory address and triggers execution via `launchctl`.