Here is about the iOS 16 exploit to change the system font (without jailbreaking). We recently published the first jailbreak tool for iOS 16, which allows users to view and alter internal system files, opening up a whole new world of customization possibilities. However, a developer was able to leverage an exploit discovered in iOS 16 to modify the system’s default typeface without requiring a jailbreak.
Changing iOS fonts
Zhuowei Zhang tweeted about his creation, which he refers to as a “proof-of-concept app.”Zhang claims that the program he created leverages the CVE-2022-46689 attack to replace the default iOS font, allowing users to change the system’s look with a typeface other than the default.
Made an app that overwrites the iOS system font using CVE-2022-46689. https://github.com/zhuowei/WDBFontOverwrite… It works on iOS 16.1.2 and below on unjailbroken devices. Four fonts are included: DejaVu Sans Condensed, Serif, Mono, and Choco Cooky (because Samsung).
Because iOS has its own font format, the developer only used a few fonts, like DejaVu Sans Condensed, Serif, Mono, and Choco Cooky, for the experiment. And if you’re wondering, Choco Cooky is the strange font that used to come on Samsung phones by default. Now you can get it on your iPhone at last.
How to get the app and change the font that comes with iOS.
Even though Zhang’s app doesn’t need to be jailbroken, it may not be easy to put it on an iPhone or iPad. This is because you need to either compile the Xcode project yourself or manually sign the IPA file with a developer certificate in order to install it on your device.
Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.
Works on iOS 16.1.2 and below (tested on iOS 16.1) on unjailbroken devices.
- DejaVu Sans Condensed
- DejaVu Serif
- DejaVu Sans Mono
- Go Regular
- Go Mono
- Fira Sans
- Segoe UI
- Comic Sans MS
- Choco Cooky
You can also import custom fonts that were ported for iOS.
IPA available in the Releases section.
- Fixed a bug where files would be not selectable on some devices.
- Reverted back to the old document picker implementation.
- Fixed a bug where the document picker would be deallocated while using.
you may also like:
Top 15 jailbreak tools and solutions for iOS 11 to iOS 16.3
- Pikzo jailbreak
- Cripzi jailbreak
- E-sign Signer – jailbreak Cydia installer
- U04S Store – Unc0ver jailbreak online installer
- Oddy Store – taurine jailbreak online installer
- Appdb pro – tweaks apps + new iOS apps installer (online)
- Zeejb app store
- Whatsapp patch app – whats app hacked app
- Youtube patch app – youtube hacked app
- lightning sign app – IPA signer
- Hexxa plus
- Checkra1n for iOS 15 / FUGU
- Unc0ver jailbreak
- Taurine / odyssey