No need to jailbreak, the developer successfully modified the system default font by exploiting Apple’s iOS 16 vulnerability

Visit the original URL

The new cool products are free to try for the first time, and there are many high-quality experts sharing unique life experiences. Come to Sina Crowdtest and experience the most cutting-edge, most interesting and fun products in various fields~! Download the client and get exclusive benefits!

The palera1n team launched a jailbreak tool for iOS 16 in the middle of this month. Jailbreak can remove software restrictions on iOS devices, so that users can access and modify system files, enabling various custom modifications and application sideloading and other functions . And now a developer has managed to exploit a vulnerability found in iOS 16 to change the default font of the iOS system without jailbreaking.

Developer Zhuowei Zhang shared the GitHub project on his personal Twitter, which he calls a “proof-of-concept application.” Zhang said the app uses the CVE-2022-46689 vulnerability to override the default iOS fonts so that users can customize the appearance of the system with fonts other than the default (San Francisco).

IT Home learned that iOS 16.1.2 and earlier versions are affected by the CVE-2022-46689 vulnerability, which basically allows applications to execute arbitrary code with kernel privileges. The vulnerability has been fixed in iOS 16.2, and the new version also fixes a series of other security vulnerabilities found in previous iOS versions.

Since iOS has its own font format, the developers experimented with only a few fonts, including DejaVu Sans Condensed, Serif, Mono, and Choco Cooky.

Zhang said that this modification is theoretically safe for everyone, so these font changes will be undone after the device is restarted. Still, the developers advise users to make backups before replacing the default system fonts.

While the app Zhang created doesn’t require a jailbreak, installing it on an iPhone or iPad might not be as easy. This is because you need to compile the Xcode project yourself or manually sign the IPA file with a developer certificate to install it on your device.

media reports

IT Home Sohu Technology Sina Technology
related events

This article is transferred from: https://readhub.cn/topic/8m6vW2HwCeQ
This site is only for collection, and the copyright belongs to the original author.