CVE-2019-6225 2

Vulnerability (CVE)

voucher_swap: Exploiting MIG reference counting in iOS 12

Brandon Azad of Google Project Zero described CVE-2019-6225, a MIG reference counting vulnerability in XNU's task_swap_mach_voucher() function that he exploited on iOS 12.1.2 to build a fake kernel task port with read and write access to arbitrary kernel...

Vulnerabilities & Patching

In-the-wild iOS Exploit Chain 5

Cyber Risks Google Project Zero

Project Zero's Ian Beer documented an in-the-wild iOS exploit chain, dubbed In-the-wild iOS Exploit Chain 5, that targeted iPhone 5s through X running iOS 11.4.1 through 12.1.2, exploiting a use-after-free in the task_swap_mach_voucher kernel MIG method....

Vulnerabilities & Patching