Adventures in Video Conferencing Part 2: Fun with Face Time
Summary: Project Zero's Natalie Silvanovich fuzzed FaceTime's encrypted audio and video streams by hooking CCCryptorUpdate and sendmsg in the avconferenced daemon, then built a replay tool that corrected SSRC, payload type, marker, and sequence numbers to reproduce crashes. The work yielded three fixed bugs: CVE-2018-4366, an out-of-bounds read in video processing on Macs; CVE-2018-4367, a stack corruption issue affecting iOS and Mac that is likely exploitable; and CVE-2018-4384, a kernel heap corruption issue in video processing on iOS.
What's compelling: Each of these bugs took less than 15 minutes of fuzzing to find on a live device, and one stack corruption bug produced segmentation faults rather than stack-cookie crashes, which the researcher assesses as likely exploitable.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026