CVE-2018-4407

Related Files

iOS 11.4.1 / macOS 10.13.6 icmp_error Heap Buffer Overflow

Posted Jun 12, 2023

Authored by Kevin Backhouse, GitHub Security Lab

Proof of concept exploit for a remotely trigger-able heap buffer overflow vulnerability in iOS 11.4.1 and macOS 10.13.6. This exploit can be used to crash any vulnerable iOS or macOS device that is connected to the same network as the attacker's computer. The vulnerability can be triggered without any user interaction on the victim's device. The exploit involves sending a TCP packet with non-zero options in the IP and TCP headers.

tags | exploit, overflow, tcp, proof of concept

systems | ios

advisories | CVE-2018-4407

SHA-256 | 5352cd5286d39bd38e49f40ff6d66d63f42d4b951311bef0126c92981172e14f

Download | Favorite | View