Skip to finding
important · Mobile

A sandboxed iOS or iPadOS app can race AVEVideoEncoder into kernel code execution.

Affects

iOS and iPadOS, Apple's operating systems for supported iPhones and iPads.

Apple fixed the race, but the disclosed record stops at the sandbox-to-kernel primitive and supplies no public exploit. Pre-fix images remain accepted.

Detail and 2 sources
Share this finding
Get it by email

The same brief, every morning. One email a day, nothing else.

Every finding here carries a source that was checked before it published. If something is wrong, write to admin@fullchain.sh — corrections are published on the day they affect.

Saturday, September 19, 2026