iOS and macOS suffers from a sandbox escape due to trusted length field in shared memory used by the HID event subsystem. Continue reading...