Full Disclosure mailing list archives

Re: Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft


From: full () x9p org
Date: Fri, 3 Oct 2025 12:42:14 -0300

Substack is down. If there is a replacement, it is appreciated.

-x9p

On 6/9/25 2:22 AM, josephgoyd via Fulldisclosure wrote:
CVE-2025-31201 — Kernel escalation via malformed AMPDU metadata (PAC bypass)

Write-Up and Artifacts:
https://weareapartyof1.substack.com/p/the-crypto-heist-apple-kept-quiet

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

Current thread: