Pedro Vilaça

The issue concerns the mishandling of process entitlement and Team ID values in the task port inheritance policy by AppleMobileFileIntegrity. This allows attackers to execute arbitrary code in a privileged context via a crafted app.

The issue is related to insufficient access control in the processor set tasks component of the iOS operating system. It allows a local attacker to bypass existing protection mechanisms and scan ports of random processes. By leveraging root privileges, an attacker can obtain access to the task ports of arbitrary processes.

The issue allows local users to conduct EFI flash attacks by leveraging root privileges, due to the lack of a locking protection mechanism when the system is woken from sleep.