The Mystery Behind ColdIntro (CVE-2022-32894) and ColdInvite (CVE-2023-27930): A Co-Processor Escape Vulnerability examines advanced security research into vulnerabilities affecting Apple devices and the communication between co-processors and the main application processor. The paper analyzes signs of real-world attacks targeting co-processors, discusses security advisories related to commercial threat actors, and reviews Apple’s response through security patches. Researchers identified ColdIntro as a vulnerability that allowed attackers to move from a device’s Display Co-Processor to the Application Processor kernel, potentially enabling deeper system compromise. The study also suggests that initial mitigations may not have fully addressed all attack methods, highlighting the complexity

Join for free to read