writeup for CVE-2023-32428, a MacOS LPE

Posted on 2024-11-27: https://gergelykalman.com/badmalloc-CVE-2023-32428-a-macos-lpe.html

this is a fun writeup. shame about Apple’s bug bounty process being so frustrating.