164 - XNU's kalloc_type, Stranger Strings, and a NetBSD Bug [Binary Exploitation Podcast]

Kicking off the week with a look at Apple's new security blog and the kalloc_type introduced into XNU, then a mix of issues including an overflow in SQLite.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/164.html

[00:00:00] Introduction
[00:00:24] Spot the Vuln - Right Code, Wrong Place
[00:03:05] Hexacon Talks are Available
[00:04:56] Towards the next generation of XNU memory safety: kalloc_type
[00:21:23] NetBSD Coredump Kernel Refcount LPE
[00:24:56] [Chrome] heap-use-after-free in AccountSelectionBubbleView::OnAccountImageFetched
[00:31:42] Stranger Strings: An …

binary binary exploitation bug exploitation podcast strings