CVE-2022-32845

ANE kernel r/w exploit for iOS 15 and macOS 12

WeightBufs: WeightBufs is a kernel r/w exploit for all Apple devices with Neural Engine support Bugs and Exploit by @simo36, you can read my presentation slides at POC for more details about the vulnerabilities and the exploitation techniques The exploit doesn't rely on any hardcoded address or offset, and it should work AS IS on macOS12 up to 124 and *OS 15 up to 155

CVE-2022-32898 CVE-2022-32898: ANE_ProgramCreate() multiple kernel memory corruption Nov 23, 2022 • Mohamed GHANNAM (@_simo36) Intro: While reverse-engineering the process of which the Apple Neural Engine loads a model in the kernel level, I identified two interesting memory corruption vulnerabilities in the code responsible for processing the neural network features in H1

WeightBufs: WeightBufs is a kernel r/w exploit for all Apple devices with Neural Engine support Bugs and Exploit by @simo36, you can read my presentation slides at POC for more details about the vulnerabilities and the exploitation techniques The exploit doesn't rely on any hardcoded address or offset, and it should work AS IS on macOS12 up to 124 and *OS 15 up to 155