checkm8 Exploit

The checkm8 exploit is a bootrom exploit with a CVE ID of CVE-2019-8900 used to run unsigned code on iOS, iPadOS, tvOS, watchOS, and bridgeOS devices with processors between an A5 and an A11 or a T2 (and thereby jailbreak it). Jailbreaks based on checkm8 are semi-tethered jailbreaks as the exploit works by taking advantage of a heap overflow in the USB DFU stack.

ipwndfu and checkra1n are currently the main tools capable of using the checkm8 exploit.

References

• Technical analysis of the checkm8 exploit
• Apple devices vulnerable to arbitrary code execution in SecureROM
• https://news.ycombinator.com/item?id=22849837