PrototypeCommune
JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201
CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025).
- Propriétaire
- JGoyd (compte personnel)
- Étoiles
- Étoiles : 210
- Forks
- Forks : 32
- Langage
- Sans langage
- Licence
- Aucune
- Création
- 2025
- Sujets
- ioszero-daycve-2025-31200cve-2025-31201appleimessagezero-clickblastdoor
- Rang
- Prototype (100 à 249 ★) Ce que veut dire ce rang