Air Drop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

Summary: Researchers Arash Ale Ebrahim and Nils Ole Tippenhauer of the CISPA Helmholtz Center for Information Security found six flaws across AirDrop and Quick Share, including three AirDrop bugs that crash the sharingd service on macOS and iOS and two Samsung Quick Share flaws that bypass session checks. Apple has patched one AirDrop bug with a CVE assigned but not yet public, Google paid a bounty and landed a fix for a use-after-free in Quick Share for Windows with its CVE pending, and Samsung's two bugs remain under investigation with no public reports of exploitation.
Bottom line: The AirDrop flaws require the device to be set to receive from "Everyone" - the exact setting Google's new AirDrop interoperability for Quick Share depends on - and a single attacker within 10 to 30 meters can keep sharingd, which also runs AirPlay, Handoff, and Universal Clipboard, down by sending a malformed request about every two seconds.

Read the original at The Hacker News ↗

Mentions: CVE-2024-38271