CVE-2024-44258

总结

此问题已通过改进对符号链接的处理得到解决。该问题已在 iOS 17.7.1 和 iPadOS 17.7.1、iOS 18.1 和 iPadOS 18.1、tvOS 18.1、visionOS 2.1 中修复。恢复恶意制作的备份文件可能会导致受保护的系统文件被修改。

来源

• CVE-2024-44258PoC

  CVE-2024-44258

• POC-CVE-2024-44258-PyPoC

  Conceptual proof-of-concept for CVE-2024-44258, an iOS symlink vulnerability during backup restoration. Demonstrates the exploitation mechanism for educational and research purposes, including simulated backup generation and theoretical validation steps.