CVE-2019-9536

Published November 22nd, 2019

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

6.9

MEDIUM

Affected

PROJECTS

Description

Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware.

axi0mX/ipwndfu

open-source jailbreaking tool for many iOS devices

GitHub

7.34K

axi0mX/alloc8

Write-up for alloc8 untethered bootrom exploit for iPhone 3GS

GitHub

387