Memory Corruption Flaw in macOS Let Hackers run Malicious Code with Root Privileges

guest · Jun 22, 2019

Memory Corruption Flaw in macOS Let Hackers run Malicious Code with Root Privileges
June 22, 2019
https://gbhackers.com/double-free-vulnerability-macos/

Security researchers discovered a double free vulnerability in macOS caused by memory corruption flaw in the AMD component. Successful exploitation of the vulnerability allows an attacker to escalate privilege and to run malicious code as a root user.

The vulnerability can be tracked as CVE-2019-8635, and it covers two flaws “namely in the discard_StretchTex2Tex method and processing of sideband tokens in an AMD Radeon class [...] and the classes are used to render graphics on macOS machines.

Trend Micro reported the flaw to Apple and patch has bee released. With the two flaws, the execution method remains the same but differs in the function taken advantage of. You can find the complete root cause analysis here.
An attacker could utilize the double free vulnerability to compromise the vulnerable machine; users are recommended to upgrade their OS X versions.
Click to expand...

Trend Micro: CVE-2019-8635: Double Free Vulnerability in Apple macOS Lets Attackers Escalate System Privileges and Execute Arbitrary Code

Log in or Sign up

Memory Corruption Flaw in macOS Let Hackers run Malicious Code with Root Privileges

guest Guest

Log in or Sign up

Memory Corruption Flaw in macOS Let Hackers run Malicious Code with Root Privileges

guest Guest

Useful Searches