Re: Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft
Substack平台出现故障,用户寻求替代方案。文章讨论了两个安全漏洞:CVE-2025-31201允许通过恶意AMPDU元数据绕过PAC进行权限提升;CVE-2025-31200则为零点击iMessage链漏洞,可导致安全 enclave密钥被盗、远程代码执行及加密资产损失。
2025-10-7 18:55:29
Author: seclists.org(查看原文)
阅读量:11
收藏
From: full () x9p org
Date: Fri, 3 Oct 2025 12:42:14 -0300
Substack is down. If there is a replacement, it is appreciated.
-x9p
On 6/9/25 2:22 AM, josephgoyd via Fulldisclosure wrote:
CVE-2025-31201 — Kernel escalation via malformed AMPDU metadata (PAC bypass)
Write-Up and Artifacts:
https://weareapartyof1.substack.com/p/the-crypto-heist-apple-kept-quiet
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/
Current thread:
- Re: Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft full (Oct 07)
文章来源: https://seclists.org/fulldisclosure/2025/Oct/3
如有侵权请联系:admin#unsafe.sh