198 - TOCTOUs in Intel SMM and Shannon Baseband Bugs [Binary Exploitation Podcast]

We've got a pretty nice root/super-use check bypass in XNU this week, and a sort of double fetch issue in Intel's SMM leading to a potential privilege escalation into the Management system. We've also got a few meme-able Shannon Baseband issues and some tough to exploit out of bound reads in MIT Kerberos V5.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/198.html

[00:00:00] Introduction
[00:00:27] Spot the Vuln - The Right Context
[00:02:52] Discussion: Using GPT-4 to …

baseband binary binary exploitation bugs bypass check context escalation exploit exploitation fetch intel introduction issue kerberos management meme mit nice podcast privilege privilege escalation root sort super system vuln