Explore a groundbreaking security vulnerability in Apple's Rosetta 2 technology through this 40-minute Black Hat conference talk. Delve into the world of Arm processors and their growing popularity in laptops, with a focus on Apple's transition from Intel to Arm-based Apple Silicon. Learn about Rosetta 2's role in translating x64 code to Arm64, and discover a novel code injection vulnerability that exploits its binary translation caching mechanism. Gain insights into how this vulnerability can be leveraged to inject malicious code, potentially compromising system security. Understand the implications of this research for the broader field of binary translation and its security considerations.
Overview
Syllabus
Dirty Bin Cache: A New Code Injection Poisoning Binary Translation Cache
Taught by
Black Hat