[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FD] Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft
- To: "full@xxxxxxx" <full@xxxxxxx>
- Subject: Re: [FD] Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft
- From: josephgoyd via Fulldisclosure <fulldisclosure@xxxxxxxxxxxx>
- Date: Fri, 03 Oct 2025 17:41:07 +0000
The GitHub link has a write up on the attack-chain. Along with the CNVD certs
that were issued for validation.
https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201
On Fri, Oct 3, 2025 at 11:42 AM, <[full@xxxxxxx](mailto:On Fri, Oct 3, 2025 at
11:42 AM, <<a href=)> wrote:
> Substack is down. If there is a replacement, it is appreciated.
>
> -x9p
>
> On 6/9/25 2:22 AM, josephgoyd via Fulldisclosure wrote:
>> CVE-2025-31201 — Kernel escalation via malformed AMPDU metadata (PAC bypass)
>>
>> Write-Up and Artifacts:
>> https://weareapartyof1.substack.com/p/the-crypto-heist-apple-kept-quiet
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/