iOS 11.3 was launched last week by the company Apple Lossless Audio CODEC (ALAC),, and in the list of news for the security of the operating system we find the closure of an important vulnerability. According to those from Apple, iOS 11.3 blocks a major vulnerability discovered in iOS 11.2.6 by computer security researchers, which can be used in a future jailbreak solution.
iOS 11.2.6 has a vulnerability that allows an app to run unsigned code with administrator privileges, so it could be exploited in a jailbreak solution. Those from Cupertino blocked this vulnerability with the release of iOS 11.3, so the new version of the operating system cannot be exploited, but the old one still remains vulnerable.
The one who discovered this vulnerability in iOS 11.2.6 made a demonstration of the exploit that he sent to Apple, but this is to be expanded. According to this person, in the next period she will use the vulnerability to make a kind of jailbreak solution that she will not publish, but that others could use for their own purposes.
"Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation. Impact: An application may be able to execute arbitrary code with kernel privileges. Description: A memory corruption issue was addressed with improved memory handling. CVE-2018-4143: derrek (@derrekr6)”
Whether the vulnerability in iOS 11.2.6 can be turned into a real jailbreak solution remains to be seen, but the chances are quite high at the moment. Unfortunately, for iOS 11.3 we do not have any possible hope that a jailbreak solution could be released, so it is very possible that it will not appear until iOS 12 is released.
