MobileReplayer app on tv

I've been working with a tvos app the last few days. As part of this, I grabbed Swiftybox using cocoapods which also grabs Alamofire. My Apple tv is connected as a device to my Mac which is how I’ve been pushing builds.


This evening I found an app called MobileReplayer in the top left corner. I see the name as part of a framework that garnered 2 CVEs, but I also see the app name associated with **** breaking. The app icon appeared to be the same default one being pushed with my app. I tried deleting but the option was not available. Thinking I may have pushed it somehow, I clicked on it and it vanished.


I‘ve disconnected the Apple tv from my mac and disconnected both from the network. I didn’t push this app. So, I’m stuck wondering if it came off my mac thanks to Swiftybox and/or Alamofire, or could it be an artifact of an automatic app update?

Google says this about that...


Mar 23, 2016 - Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname.


I'm led to believe that associated path vulnerabilites were fixed since then, but you don't say what version tvOs/macOS you're on, so...

Did some greping and finding.


~/Library/Developer/Xcode/iOS DeviceSupport/[build #]/Symbols/Developer/Applications/ for build versions ranging from 5.1.1 to 7.1.2 contain the MobileReplayer.app.


I can see in the device logs where my app was deployed, but I have no record of this app being pushed.


Curioser.

MobileReplayer app on tv
 
 
Q