blastdoor

Here is 1 public repository matching this topic...

JGoyd / iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025).

ios apple imessage zero-day zero-click cve-2025-31201 cve-2025-31200 blastdoor

Updated Oct 6, 2025

Improve this page

Add a description, image, and links to the blastdoor topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the blastdoor topic, visit your repo's landing page and select "manage topics."

Learn more

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

blastdoor

Here is 1 public repository matching this topic...

JGoyd / iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

Improve this page

Add this topic to your repo