librarian (CVE-2023-38571) - a macOS TCC bypass in Music and TV
Posted on 2023-09-27 in blog • Tagged with macOS, ASB, tcc bypass, 0day
This post is a writeup of CVE-2023-38571, a macOS TCC bypass bug I found. It was supposed to be unveiled in my upcoming talk:
"Unexpected, Unreasonable, Unfixable: Filesystem Attacks on macOS" at OBTS v6,
but I needed to cut some bugs out. This is another one of them.
Background
While …
Continue reading