EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 1·5 min read
Apple Screen Sharing Pre-Auth RCE
TL;DR
A pre-authentication vulnerability in Apple's Secure Remote Password (SRP) protocol allows for remote code execution (RCE) due to improper frame-length validation. This flaw can be exploited when the SRP daemon mishandles large frame lengths, potentially leading to unauthorized access.
✦ Why It Matters
Review and update your SRP implementations to mitigate this critical vulnerability immediately.
Key Takeaways
- Update macOS to version 26.6 to fix the vulnerability.
- Disable Screen Sharing if not in use to prevent exploitation.
- Review authentication mechanisms for proper error handling.
- Monitor systems for unauthorized access attempts.
How It Works
The vulnerability arises when the screensharingd daemon incorrectly processes SRP frame lengths. If the length exceeds 32768, it returns a success status instead of an error, allowing attackers to bypass authentication and send commands directly to the server.
This leads to the execution of arbitrary code with root privileges.