[BREAKING] @Apple just released iOS 15.0.2 and patched CVE-2021-30883, yet another vulnerability in IOMobileFrameBuffer, that was *exploited in the wild*.
[ACTION REQUIRED] Update your iOS devices as soon as you can.
[ACTION REQUIRED] Update your iOS devices as soon as you can.
This vulnerability is possibly related to: CVE-2021-30807, also in IOMobileFrameBuffer, that was patched in iOS 14.7.1. The vulnerability provides to attackers kernel privileges after they already gained initial code execution capabilities on the device.
Some technical details and POC of the IOMFB Integer (CVE-2021-30883) Overflow are already available by the fantastic @AmarSaar saaramar.github.io/IOMFB_integer_…
Accessible from the browser
https://twitter.com/ZecOps/status/1447804721771606016
• • •
Missing some Tweet in this thread? You can try to
force a refresh
