An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that triggers a SetAppSupportBits use-after-free because of a race condition.
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
| Link | Tags |
|---|---|
| https://www.exploit-db.com/exploits/44847/ | exploit vdb entry third party advisory |
| http://www.securitytracker.com/id/1041027 | vdb entry third party advisory |
| https://bugs.chromium.org/p/project-zero/issues/detail?id=1549 | third party advisory exploit |
| https://support.apple.com/HT208849 | vendor advisory |