3 ms·
Neat. Maybe we'll get an iOS 14.6 jailbreak out of this. Can anyone read the decompiled code in the screenshot? It seems like it does this: x = stringWithFo
by NavinF 5y ago
Neat. Maybe we'll get an iOS 14.6 jailbreak out of this.
Can anyone read the decompiled code in the screenshot? It seems like it does this:
x = stringWithFormat(const_string, attacker_string);
y = stringWithFormat(const_string2, x);
log(y);
Is that really exploitable or am I reading it wrong?
- _kbh_ 5y agoit was patched in 14.4 it seems so, so looks like no 14.6 jailbreak out of this. It looks like it may be exploitable, but the exploitation mitigations on iOS likely make it difficult.
- NavinF 5y agoThey claim that there are 2 attacks: The "WiFiDemon 0-Click Attack" was fixed in 14.4 whereas the "WiFi 0Day Format Strings Attack" is still viable on 14.6 I guess nobody here knows Objective-C so I'll never know how the latter attack works ¯\_(ツ)_/¯