cve/2016/CVE-2016-1807.md

CVE-2016-1807

Description

Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to obtain sensitive information from kernel memory via unspecified vectors.

POC

Reference

• http://packetstormsecurity.com/files/137395/OS-X-iOS-Kernel-IOHDIXControllerUserClient-Use-After-Free.html
• https://www.exploit-db.com/exploits/39929/

Github

No PoCs found on GitHub currently.