IOMobileFramebuffer is a kernel extension that manages the screen framebuffer. Originally developed for iOS, it is now used on all platforms with display output, excluding Intel and PowerPC Macs.
It has had several security-relevant bugs:
- CVE-2011-0227, patched in iOS 4.2.9 and 4.3.4
- CVE-2015-1097, patched in iOS 8.3
- CVE-2015-5843, patched in iOS 9.0
- CVE-2016-4654, patched in iOS 9.3.4
- CVE-2017-13879, patched in iOS 11.2
- CVE-2018-4335, patched in iOS 12.0
- CVE-2021-30807, patched in iOS 14.7.1, needs entitlement but may be exploitable from WebContent.
- CVE-2021-30883, patched in iOS 15.0.2, exploitable from app sandbox without special entitlements.
As of A14 and M1, much of the driver has moved to the Display Coprocessor (DCP).