3 ms·
How feasible would it be to find bugs in the iPhone kernel’s network stack? I imagine this is pretty battle-tested stuff, but it would tick all the boxes for re
by snazz 7y ago
How feasible would it be to find bugs in the iPhone kernel’s network stack? I imagine this is pretty battle-tested stuff, but it would tick all the boxes for remote and no interaction.
Edit: Since it's XNU, and it's open-source, and it's been around for a really long time, this seems unlikely. But if something was found in here, for instance, everything would be practically compromised: https://github.com/apple/darwin-xnu/blob/master/bsd/netinet/ip_input.c https://github.com/apple/darwin-xnu/blob/master/bsd/netinet/...
- saagarjha 7y agoHere's one in the Multipath TCP component: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4241 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4241. I don't think this is remotely exploitable, though.