Type Confusion Vulnerability in macOS coreaudiod Daemon

A Google Project Zero security engineer discovered and exploited a high-risk type confusion vulnerability in macOS's coreaudiod daemon using a knowledge-driven fuzzing approach. The vulnerability resides in Mach IPC message handling, allowing attackers to manipulate Mach messages to bypass sandbox restrictions, potentially leading to code execution. The researcher open-sourced their custom fuzzing harness and detailed the exploitation process and Apple's fix.