KVM Bugs and an iOS IOMFB Kernel Exploit [Binary Exploitation]

02/12/2021 57 min Temporada 2 Episodio 26

Listen "KVM Bugs and an iOS IOMFB Kernel Exploit [Binary Exploitation]"

Episode Synopsis

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/kvm-bugs-and-an-ios-iomfb-kernel-exploit.html
Starting off this week with the new humble bundle and some discussion about hacking books. Then onto the vulns, some OOB access, uninitalized memory, and iOS exploit strategy.
[00:00:17] Spot the Vuln - Counting Widgets
[00:02:36] Humble Book Bundle: Hacking by No Starch Press
[00:17:14] KVM: SVM: out-of-bounds read/write in sev_es_string_io
[00:23:42] Anker Eufy Homebase 2 home_security CMD_DEVICE_GET_SERVER_LIST_REQUEST out-of-bounds write vulnerability
[00:34:14] Apple ColorSync: use of uninitialized memory in CMMNDimLinear::Interpolate
[00:40:16] Popping iOS