228 - Hypervisor Bugs and a FAR-out iOS bug [Binary Exploitation Podcast]

This week kicks off with a a V8 misoptimization leading to out-of-bounds access, an unprotected MSR in Microsoft's Hypervisor allowing corruption of Hypervisor code. We also take a quick look at a 2021 CVE with an integer underflow leading to an overflow in the Windows Kernel low-fragmentation heap, and finally an interesting information leak due to the kernel not clearing a sensitive register.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/228.html

[00:00:00] Introduction
[00:00:56] Spot the Vuln …

access binary binary exploitation bug bugs code corruption cve exploitation far fragmentation hypervisor integer ios kernel low microsoft out-of-bounds overflow podcast week windows windows kernel