Pod2G has found another exploit for the iPod touch 2G that may be used to provide a jailbreak for both MC and non-MC models.

A heap overflow exists in the iPod touch 2G (both old and new) bootrom’s DFU Mode when sending a USB control message of request type 0xA1, request 0×1.

On newer devices, the same USB message triggers a double free() when the image upload is marked as finished, also rebooting the device (but that’s not exploitable because the double free() happens in a row). posixninja analyzed and explained this one.


Related posts:

  1. Geohot: There is an Unreleased Exploit in Every iPhone, iPad, iPod [Video]
  2. RedSn0w Updated to Jailbreak iOS 4.1 on iPhone 3G, iPod Touch 2G

Related posts brought to you by Yet Another Related Posts Plugin.