CVE-2025-24103 : General TCC Bypass

0. CVE-2025-24103 : GuluBadInstallAssistant 1. Detail 1.1 What if we could execute the osinstallersetupd command successfully? 1.2 src 1.3 dst 2. Exploit Step 1: Prepare the malicious file on your own macOS Step 2: Download the malicious file malicious-osinstallersetupd.zip to the victim macOS 3. 14 G ? No, it’s 24M or less 4. Demo 5. Patch : macOS 15.3 6. One more thing 0. CVE-2025-24103 :…