cve/2021/CVE-2021-30770.md

28 lines
1.4 KiB
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2021-30770](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30770)
![](https://img.shields.io/static/v1?label=Product&message=iOS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=tvOS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=watchOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2014.7%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%207.6%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=An%20attacker%20that%20has%20already%20achieved%20kernel%20code%20execution%20may%20be%20able%20to%20bypass%20kernel%20memory%20mitigations&color=brighgreen)
### Description
A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/Abdulhadi21/fugu14
- https://github.com/Abdulhadi21/https-github.com-LinusHenze-Fugu14
- https://github.com/LinusHenze/Fugu14
- https://github.com/epeth0mus/Fugu16
- https://github.com/evilcorp1311/kkkk
- https://github.com/gfam2801/fugu14-online
- https://github.com/houjingyi233/macOS-iOS-system-security
- https://github.com/nanerasingh/fugu14