Episode 12

Exploits-galore iOS (checkm8), Android, Signal, Whatsapp, PHP and more

07 October 2019

Show Notes

Checkm8 - iPhone bootROM exploit

iPhone A11 debug registers allow full-featured kernel debugging

Android: Use-After-Free in Binder driver

Additional Links: https://groups.google.com/forum/#!msg/syzkaller-bugs/QyXdgUhAF50/g-FXVo1OAwAJ

PHP 7.0-7.3 disable_functions bypass

Additional Links: https://bugs.php.net/bug.php?id=72530

An Empirical Study of C++ Vulnerabilities in Crowd-Sourced Code Examples

Additional Links: https://cwe.mitre.org/data/definitions/20.html

Signal RTP is processed before call is answered

Additional Links: https://bugs.chromium.org/p/project-zero/issues/detail?id=1943

Attacking CNN-based anti-spoofing face authentication in the physical domain

The Kernel Concurrency Sanitizer (KCSAN)

Eradicating Attacks on the Internal Network with Internal Network Policy

Analyzing Control Flow Integrity with LLVM-CFI