“… a new iOS kernel exploitation technique that turns a one-byte controlled heap overflow directly into a read/write primitive for arbitrary physical addresses, all while completely sidestepping current mitigations”

Link. “I don’t think this technique represents the current state-of-the-art … it might represent the state-of-the-art of a few years ago.”