DevGoogle Project Zero5 months ago
Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529
16 min read
CVE-2024-54529 is a type confusion vulnerability in the com.apple.audio.audiohald Mach service within CoreAudio. The flaw allowed virtual calls on objects of incorrect type, leading to exploitable crashes. The author details turning the crash into a working exploit through knowledge-driven fuzzing.
Level
Hype check
Tap to vote and see what everyone thinks.
