
Proof-of-concept demonstrating CVE-2021-30731, allowing unauthorized USB webcam access on macOS. Built with libuvc, it previews connected webcams on vulnerable systems.
Previews the connected webcam as a PoC of CVE-2021-30731.
Must be running macOS 11.3.1 or lower or macOS 10.15 before Catalina Security Update 2021-004.
brew install autoconf automake cmake libtool pkg-config./bootstrap.shSelect a UVD compatible USB webcam from the list. If it does not appear, unplug and replug the device. Note that built in FaceTime HD cameras on MacBooks cannot be captured because of UsbUserClientEntitlementRequired.
Tested working with the LG UltraFine 5K built-in webcam.
Since this is just a PoC, there's a few bugs that's not been resolved.