Re:A buffer overflow in the XNU kernel
by tedunangst on Thursday June 20, 2024 @07:09PM
(#40744484)
Yeah, that works for web vulns where the vuln description is practically the exploit anyway. I could write a perl script that parses out variable names and writes sql injections for it.
[ Parent
| on HN ]
Re:A buffer overflow in the XNU kernel
by poincaredisk on Friday June 21, 2024 @01:17AM
(#40746380)
For comparison, in the native world program is considered vulnerable when someone finds arbitrary write primitive (even without leak), use after free, and even double free. There is a huge gap between these and actually having a working RCE exploit. Most CVEs in this space are given without a working exploit ever written.