Re: [FD] Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft
文章披露了两个iOS漏洞(CVE-2025-31200和CVE-2025-31201),涉及零点击iMessage攻击链、安全 enclave密钥窃取、可蠕虫化的远程代码执行(RCE)以及加密资产盗窃,并提供了GitHub链接和CNVD证书用于验证。 2025-10-7 18:56:48 Author: seclists.org(查看原文) 阅读量:15 收藏

fulldisclosure logo

Full Disclosure mailing list archives


From: josephgoyd via Fulldisclosure <fulldisclosure () seclists org>
Date: Fri, 03 Oct 2025 17:41:07 +0000

The GitHub link has a write up on the attack-chain. Along with the CNVD certs that were issued for validation.

https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

On Fri, Oct 3, 2025 at 11:42 AM, <[full () x9p org](mailto:On Fri, Oct 3, 2025 at 11:42 AM,  <<a href=)> wrote:

Substack is down. If there is a replacement, it is appreciated.

-x9p

On 6/9/25 2:22 AM, josephgoyd via Fulldisclosure wrote:
CVE-2025-31201 — Kernel escalation via malformed AMPDU metadata (PAC bypass)

Write-Up and Artifacts:
https://weareapartyof1.substack.com/p/the-crypto-heist-apple-kept-quiet
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

Current thread:


文章来源: https://seclists.org/fulldisclosure/2025/Oct/4
如有侵权请联系:admin#unsafe.sh