There is an OS X exploitable kernel NULL dereference in IOAccelSharedUserClient2::page_off_resource.
This site contains information which could be considered illegal in some countries. It is provided here for educational use only and is not intended to be used for illegal activities.