Deconstructing The Beast: A Deep Dive Into JIT Compilation Attacks In iOS
summary
Overview of iOS layers and why compilation matters leads to a focused look at JavaScriptCore JIT inside Safari, concrete exploit classes — JIT spraying, bypass ASLR, type confusion and deoptimization — and real CVEs: CVE-2020-27930 (patched in iOS 14.2 and 12.4.9) plus Google Project Zero fixes landed in iOS 13.5 / Safari 13.1.1. Demonstrated impacts include remote code execution, privilege escalation and data leakage across 1+ billion iOS devices, and practical mitigations are JIT restriction, sanitizers and focused code audits.
AI-written summary · about
chapters (5)
- 0:00Introduction
- 4:14Aot vs JIT Compilation
- 7:58Basics of JIT Compilation
- 10:00Understanding Jit compilation in the context of Safari JavaScript engine
- 22:30Future topic of research
related talks
33mWebKit Everywhere: Secure or Not?
52mBehind the Scenes of iOS Security
22mThinking Outside the JIT Compiler
47mSecurity Threats & Mitigations for iOS Developers
27miOS Attack Vectors and how to protect your app
37mReviving JIT Vulnerabilities: Unleashing the Power of Maglev Compiler Bugs on Chrome Browser
45mAbusing Performance Optimization Weaknesses to Bypass ASLR
27mAttacking the WebAssembly Compiler of WebKit