Re: [FD] Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft

[josephgoyd via Fulldisclosure <fulldisclosure () seclists org>]

The GitHub link has a write up on the attack-chain. Along with the CNVD certs that were issued for validation.

https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

On Fri, Oct 3, 2025 at 11:42 AM, <[full () x9p org](mailto:On Fri, Oct 3, 2025 at 11:42 AM,  <<a href=)> wrote:

> Substack is down. If there is a replacement, it is appreciated.
>
> -x9p
>
> On 6/9/25 2:22 AM, josephgoyd via Fulldisclosure wrote:
> > CVE-2025-31201 — Kernel escalation via malformed AMPDU metadata (PAC bypass)
> >
> > Write-Up and Artifacts:
> > https://weareapartyof1.substack.com/p/the-crypto-heist-apple-kept-quiet
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/