A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Cy-Shadow/Location-Track
- https://github.com/T-jatesada/OpenHayStack
- https://github.com/positive-security/find-you
- https://github.com/seemoo-lab/openhaystack
- https://github.com/tangochuy/openhaystack
- https://github.com/tangochuy/seemoo-lab_openhaystack
- https://github.com/youneselmoukhtari/airtag-zonder-Apple-s-restricties
- https://github.com/youneselmoukhtari/openheystack