Illustration drawn by RepoMasters from the repo’s ID and its language color. Credits

PrototypeCommon

JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025).

Owner: JGoyd (personal account)
Stars: Stars: 210
Forks: Forks: 32
Language: No language
License: None
Created: 2025
Topics: ioszero-daycve-2025-31200cve-2025-31201appleimessagezero-clickblastdoor
Tier: Prototype (100 to 249 ★) What this tier means

View on GitHub