CVE-2024-27815 PoC — Apple iOS 和 iPadOS 安全漏洞

Source

https://github.com/jprx/CVE-2024-27815

Associated Vulnerability

Title:Apple iOS 和 iPadOS 安全漏洞 (CVE-2024-27815)
Description:An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges.

Description

XNU kernel buffer overflow. Introduced in xnu-10002.1.13, fixed in xnu-10063.121.3

Readme

# CVE-2024-27815

XNU kernel buffer overflow. Introduced in `xnu-10002.1.13`, fixed in `xnu-10063.121.3`.

Writeup: https://jprx.io/cve-2024-27815

```bash
gcc TURPENTINE.c -o TURPENTINE
./TURPENTINE
```

### Hash

```bash
$ sha256sum TURPENTINE.c
f7160a6ad7d52f32d64b86cf3006c98a217954d80c3fc71a8f27595e227d0fa0  TURPENTINE.c
```

[Hash posted to X on Feb 17, 2024](https://x.com/0xjprx/status/1758753797441266010)

File Snapshot


 [4.0K]  /data/pocs/2845c1d4f8c489852fa41afd042e46e4da92e20d
├── [ 416]  README.md
└── [2.3K]  TURPENTINE.c

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!