CyberRota Analysis
AI-GeneratedNoSleep 1.5.1 is vulnerable due to a privileged XPC Mach service that accepts attacker-controlled raw dictionary messages, allowing potential exploitation through manipulated command and NSBundlePath values. This could lead to unauthorized access or execution of arbitrary code within the application. Organizations using NoSleep 1.5.1 should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NoSleep 1.5.1 exposes a privileged XPC Mach service and accepts raw dictionary messages containing attacker-controlled command and NSBundlePath values.This issue affects NoSleep: 1.5.1.