What's going on GeekTube, GF9 here. In today's video we have some great news for those of you waiting for a Geodragon iOS 16
A brand new vulnerability was released and this one is not even patched by Apple yet, which means it supports older devices on the latest version
This video is brought to you by EmuLog, a software that allows you to unlock the streamed passcode, bypass any VM you will sim lock and even remove the streamed passcode if you forgot them
Definitely check the program out in the links below, especially if you have a hand-down device or a second-hand one
A couple of days ago, back on February 13, the Project Zero bug posted called XEMU, used Apple Free due to insufficient locking in a call worker thread
Project Zero is a bug published by Google Project Zero, particularly Ned Williams and a tech exec here, and it only seems to be surfacing now
However, this vulnerability was not closed like they normally are on Google Project Zero. It was closed because the deadline was exceeded, so it was automatically de-restricted
What this means is that this was reported and the severity is high, as you can see here, it's not just a piny X word or something that does nothing
It does have high severity over here, but Apple did not patch it yet
This means that as of iOS 16.3.1 and iOS 16.3, which are currently the latest signed iOS versions, this vulnerability is currently available, so they are vulnerable to this over here
So this is basically everything related to this vulnerability, and a lot of people asked me if this could be used for Geobricks purposes
From the description, it appears that it targets the iOS kernel, XEMU, so it says used after free due to insufficient locking in a call worker thread
Now, I analyzed a little bit the information available, and it appears that this could potentially be used in order to run arbitrary code
Now, at this moment, it's not clear how volatile this vulnerability is. There is no exploit available, just a crash load available over here
Now, this could, in theory, be usable for Geobricks purposes in the future. We'll have to see exactly what's going on with this vulnerability
I have no idea why Apple did not patch it yet. Google 4.0 gave them 90 days disclosure deadline in order for them to patch it, however, they failed to patch it, and as such, it's now been automatically de-restricted
However, if I'm right, this could be usable for Geobricks purposes in the future, especially since this probably works with the newer devices as well, like iPhone 13, 12, 11, and so on
A lot of systems are linking it and asking about it, if it could be useful. We don't know for the moment how useful it is. It could be useful, especially since it's a kernel vulnerability, but I guess we will have to wait for Apple to patch it and for X-Force to sell it
But yeah, keep an eye on it in the future. Thank you for watching, I'm GFL, till the next time, subscribe, stay updated, and peace out