A research of digital forensic method based on the Checkm8 heap vulnerability

With the increasing popularity of mobile phones, mobile phone forensics is becoming increasingly important to the area of government activities. It is considerable difficult to conduct digital investigation work as the mobile phone manufacturer's user data is relatively well secured. In particular, forensic staff have difficulty in obtaining more information about the current situation when the phone holder refuses to give out the password. As the Checkm8 vulnerability requires physical access to the iPhone and the establishment of USB connections, this Apple chip vulnerability, which was revealed in 2019, is a technique that is more conducive to iPhone forensics. If paired with the libmobiledevice environment, forensics workers could gain high access to semi-encrypted data on some iPhone models through jailbreak while on the locked screen. Depending on the available decryption techniques, forensic workers can gain greater access to information about the phone's owner.