TGViewer
Android Security & Malware Android Security & Malware @androidmalware · 44.9K subscribers
Post #2775 10.3K
Analysis of CVE-2025-31200, a zero-day, zero-click RCE in iOS. Triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025)
https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201
GitHub GitHub - JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201: CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s… CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalati...
  • 🔥 16
  • 👍 6
  • ❤ 2
  • 🌚 2
Open in Telegram All posts from @androidmalware
More from @androidmalware
  1. Sep 28, 2026A native APK and DEX decompiler written in Rust https://github.com/Ch0pin/rdx
  2. Sep 28, 2026RemControl: AI Built the Overlays. Victims Lose their PINs https://www.group-ib.com/blog/r…
  3. Sep 27, 2026Getting root on OnePlus 15 from an untrusted app, via an audio debug service and a vendor…
  4. Sep 22, 2026Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC http…
  5. Sep 17, 2026RatHat: AI-Powered Mobile Threat is Here for Your Credentials & Bank Accounts https://zimp…
  6. Sep 14, 2026Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration https://zimperium.com/b…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →