In this
paper, I introduce the reader to a heap metadata corruption against the latest
version of avr-libc. This allocator is used in embedded systems, Arduino, and
the Internet of Things (IoT). In the overlapping chunks technique, an attacker corrupts
the size of an allocated chunk to make it larger and overlap into the next
chunk. This modified chunk is then freed and it is placed into the freelist.
The allocator will subsequently return this chunk for the size that it has been
modified too. Thus, the chunk overlaps the next chunk.
AVR LIBC Overlapping Chunks.PDF
Exploiting the Lorex 2K Indoor Wifi at Pwn2Own Ireland
Introduction In October InfoSect participated in Pwn2Own Ireland 2024 and successfully exploited the Sonos Era 300 smart speaker and Lor...
-
InfoSect has always been committed to fostering diversity and inclusion within the cybersecurity industry, with a special focus on encourag...
-
Summary This is the next part of the C++ memory corruption series*. In this post, we'll look at corrupting the std:string object in L...
-
Syed Faraz Abrar @farazsth98 Summary In this blog post, I will provide some details on how the Chromium developers implemente...
