234 - Allocator MTE, libwebp, and Operation Triangulation [Binary Exploitation Podcast]

This week's highly technical episode has discussion around the exploitation of a libwebp vulnerability we covered previously, memory tagging (MTE) implementation with common allocators, and an insane iPhone exploit chain that targeted researchers.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/234.html

[00:00:00] Introduction
[00:02:35] PagedOut Issue 3
[00:05:14] GPSd NTRIP Stream Parsing access violation vulnerability
[00:08:25] Exploiting the libwebp Vulnerability, Part 1: Playing with Huffman Code
[00:30:01] Strengthening the Shield: MTE in Heap Allocators
[00:37:40] Operation Triangulation …

access binary binary exploitation exploit exploitation exploit chain exploiting implementation introduction iphone iphone exploit issue libwebp memory operation triangulation parsing podcast researchers stream tagging technical triangulation vulnerability week