Deja-XNU
Summary: Google Project Zero's Ian Beer revisited CVE-2014-4461, a kernel bug in IOSharedDataQueue that Pangu Team exploited in the Pangu 7 jailbreak for iOS 7.1-7.1.x released June 23 2014, and combined it with a similar new issue to build what he calls a "perfect" exploit for iOS 7.1.2. Beer notes the IODataQueue implementation was 243 lines including license and comments and counted at least 6 bugs in it, with the core problem being that the queue's length was stored only in shared memory that userspace could modify.
Bottom line: Apple's fix for CVE-2014-4461 did not land in iOS 8, and Pangu reused the same bug for Pangu 8 - a reminder that a patched-looking vulnerability can survive into the next major release and be weaponized again.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2014-4388CVE-2014-4389CVE-2014-4418CVE-2014-4461
- Related
- More Mac OS X and iPhone sandbox escapes and kernel bugs Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026