Uncovering “BadAlloc” Memory Vulnerabilities in Millions of IoT Devices
summary
Microsoft researchers describe discovery of a family of memory-allocation vulnerabilities called “BadAlloc” affecting over 20 SDKs and RTOSes (including VxWorks) used across consumer, medical, IIoT and ICS devices. They explain the discovery process, show exploitability leading to remote code execution across many devices, and provide mitigation recommendations.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:59Reminder about Integer Overflows
- 2:02Memory Allocators
- 5:06Demonstration
- 7:07Buffer Overflow
- 12:19Technical Analysis
- 18:30How Do We Execute Code
- 20:41Demo
- 25:00Mitigation Techniques
- 25:59Check the Macros
related talks
44mNight of the living vulnerabilities
44mCritical Zero Days Remotely Compromise the Most Popular Real-Time OS
01h 16mClassic Vulnerabilities
39mVulnerabilities in Old Third-Party Software Components- Importance of Having SBoM for IoT/OT Devices
25mKill Latest MPU-based Protections in Just One Shot: Targeting All Commodity RTOSes
39mNight of the living vulnerabilities
34mCoDe16; 16 Zero-Day Vulnerabilities Affecting CODESYS Framework Leading to Remote Code Execution
01h 05mClassic Vulnerabilities