Description
NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NoSleep | NoSleep | 1.5.1 | — |
References
- https://fluidattacks.com/advisories/iggy third-party-advisory
- https://github.com/integralpro/nosleep/ product