simo releases PoC demonstrating iOS 14.1 kernel vulnerability

November 14th, 2020, 22:50 Posted By: wraggster

When it comes to app-based jailbreaks such as unc0ver and Odyssey, new kernel exploits are always essential in order to jailbreak newer iOS releases. This is because kernel exploits, unlike hardware exploits such as checkm8 (supports A11 & older), can be patched through an iOS update thus eliminating previously-used methods to obtain arbitrary code execution with kernel privileges which are key to jailbreak development.
Now, simo (@_simo36 on Twitter) has released a PoC for CVE-2020-27905 (fixed in iOS 14.2 released 2 days ago) which is a vulnerability in the IOAcceleratorFamily component found within iOS that allows for arbitrary code execution with system privileges according to Apple. It is important to mention that simo has released a PoC not a fully-fledged exploit meaning that the code in its current form does not grant tfp0 and/or kernel R/W. However, simo also mentioned that he might release an exploit later on although someone else in the community might decide to write an exploit themselves with the PoC to expedite the creation of a jailbreak for an app-based iOS 14.1 supporting all devices!

https://wololo.net/2020/11/07/ios-ja...on-save-blobs/

There are 0 comments - Join In and Discuss Here