Tuesday, 31 March, 2026
Google Project Zero Discovers ASLR Bypass via NSDictionary in Apple Devices
By Isha
A researcher from Google Project Zero revealed a new method that bypasses Address Space Layout Randomization (ASLR) on Apple’s macOS and iOS without relying on memory corruption or timing side-channels. The exploit uses NSDictionary serialization/deserialization to leak memory addresses by tracking placement of entries in hash buckets, ultimately revealing the address of the NSNull singleton.
Read full story at Cybersecurity News