Get the latest tech news

A buffer overflow in the XNU kernel


XNU kernel buffer overflow, introduced in macOS 14.0 and fixed in macOS 14.5.

Note: Recall that bcopy's arguments are(source, dest, len)- the opposite of memcpy. This macro was presumably added to increase performance by removing a redundant check, but this was done incorrectly._MSIZE is the total size of a message buffer, including its header. Don't let the kexts in the backtrace fool you- this bug is localized to just the main kernel.

Get the Android app

Or read this on Hacker News

Read more on:

Photo of buffer overflow

buffer overflow

Photo of xnu kernel

xnu kernel