Google Project Zero has published the second part of its series on macOS security research, this time focusing on exploiting CVE-2024-54529. The vulnerability is a type confusion bug in coreaudiod, the system daemon responsible for audio on macOS. The same research also identified a double-free vulnerability, tracked as CVE-2025-31235, in the same daemon.
According to the post, the researcher's journey began in Part I, which detailed the discovery of these flaws. Part II walks through the exploitation of the type confusion vulnerability, demonstrating how an attacker might turn the bug into a working exploit. The series highlights coreaudiod as a significant attack surface on macOS, given its privileged position in the system.