Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages (blogspot.com)
Every second, highly-privileged MacOS system daemons accept and process hundreds of IPC messages. In some cases, these message handlers accept data from sandboxed or unprivileged processes.