The 2021 Pwnie Nominee For Best Privilege Escalation Bug

Mistune

Researcher Name: Zhi Zhou

Link: https://blog.chichou.me/mistune/

Clocking in at over a decade old, this bug was introduced all the way back in iOS 3! This was used as a part of the first successful TianfuCup iPhone pwns after PAC rolled out. Who could have thought iTunes would betray us like this. At least it’s not more U2.