In-the-wild iOS Exploit Chain 1
Summary: Google Project Zero documented an in-the-wild iOS exploit chain targeting iOS 10.0.1 through 10.1.1 on iPhone 5s through 7, likely active since September 2016. The chain exploits a heap overflow in AGXAllocationList2::initWithSharedResourceList in the com.apple.AGX GPU driver, reachable directly from the Safari WebContent sandbox with no separate sandbox escape.
Key Takeaway: Project Zero's analysis indicates this group held a capability against a fully patched iPhone for at least two years, and a variant of the same bug was not fixed until iOS 12 - meaning minor changes would have kept the exploit working long after the initial patch.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026