# JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

<https://repo.masters-masters.com/en/repos/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201>

[Home](https://repo.masters-masters.com/en) › [JGoyd](https://repo.masters-masters.com/en/owners/JGoyd) › [iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201](https://repo.masters-masters.com/en/repos/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201)

JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201 has 210 stars on GitHub. Its RepoMasters card: Prototype tier. CVE-2025-31200 is a zero-day, zero-click…

| Field | Value |
| --- | --- |
| Owner | [JGoyd](https://repo.masters-masters.com/en/owners/JGoyd) |
| Stars | 210 |
| Forks | 32 |
| Language | No language |
| License | None |
| Created | 2025 |
| Topics | ios, zero-day, cve-2025-31200, cve-2025-31201, apple, imessage, zero-click, blastdoor |
| Tier | [Prototype (100 to 249 ★)](https://repo.masters-masters.com/en/ranks/rush) |
| View on GitHub | [JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201](https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201) |

## Repository

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025).

The tier for repos with 100 to 249 ★. Published odds per card pulled: 70%. Rarity: Common.

---
Data: GitHub · Illustration drawn by RepoMasters from the repo’s ID and its language color.