It's based on vulnerabilities disclosed in Stefan Esser's iOS security workshop.