DEF CON 26 - Yu Wang - Attacking the macOS Kernel Graphics Driver
1,504 views · Published 22 October 2018 · 35:25 · Indexed 3 October 2026
Channel: DEFCONConference · 2018 · Science & Technology
Just like the Windows platform, graphic drivers of macOS kernel are complicated and provide a large promising attack surface for EoPs and sandbox escapes from low-privileged processes. After auditing part of the binaries, I discovered a number of vulnerabilities last year. Including, NULL pointer dereference, stack-based buffer overflow, arbitrary kernel memory read and write, use-after-free, etc. Some of these vulnerabilities were reported to Apple Inc., such as the CVE-2017-7155, CVE-2017-7163, CVE-2017-13883. In this presentation, I will share with you the detailed information about these vulnerabilities. Furthermore, from the attacker's perspective, I will also reveal some new exploit techniques and zero-days.
More from this channel
-
7:53
DEF CON 20 Documentary Bonus Clips - CDC muxed
-
47:43
DEF CON 20 - Raphael Mudge - Cortana: Rise of the Automated Red Team
-
43:15
DEF CON 20 - Peter Hannay - Exchanging Demands
-
49:37
DEF CON 20 - Richard Thieme - Twenty Years Back Twenty Years Ahead
-
25:01
DEF CON 20 - Ryan Holeman - Passive Bluetooth Monitoring in Scapy
-
48:14
DEF CON 20 - Xeno Kovah and Corey Kallenberg - No More Hooks
-
43:51
DEF CON 20 - Wesley McGrew - SCADA HMI and Microsoft Bob
-
51:04
DEF CON 20 - Panel - The Making of DEF CON 20