---
id: 8656
title: "Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass"
source_domain: projectzero.google
source_url: "https://projectzero.google/2020/01/remote-iphone-exploitation-part-2.html"
published_at: "2020-01-09T00:00:00Z"
tags: ["rce", "iphone", "exploit-development", "project-zero", "remote-exploitation"]
phying_url: "https://phying.com/item/8656"
lang: en
---

# Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass

## Summary

The initial primitive gained from the vulnerability is an absolute address dereference in which the read value is afterwards used as an ObjC object. As such, some knowledge of the target address space is required in order to exploit this vulnerability for remote code execution. This blog post describes a way to defeat ASLR remotely without any additional information disclosure vulnerabilities.

## Intelligence Metadata

- **Sources:** projectzero.google
- **Published:** 2020-01-09T00:00:00Z
- **Original:** https://projectzero.google/2020/01/remote-iphone-exploitation-part-2.html
- **Phying News:** https://phying.com/item/8656