190 matches found
iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201
CVE-2025-31200 & CVE-2025-31201 | iMessage Zero-Click RCE Chain Summary This repository documents research into a zero-click remote exploit chain affecting iOS 18.x and beyond. A malformed AMR audio file delivered via iMessage triggers: 1. Heap corruption in CoreAudio CVE-2025-31200 — in...
apple-positional-audio-codec-invalid-header
Proof-of-concept for the CoreAudio patch CVE-2025-31200 in iOS 18.4.1. Write-up here https://blog.noahhw.dev/posts/cve-2025-31200/. Update 05/27/2025 I have been able to push this to a controlled if not arbitrary write. The writeup is coming soon. In order to see for yourself though, you'll have ...
CVE-2025-31200
CVE-2025-31200: CoreAudio APAC Channel Remapping Buffer Overflow Vulnerability Overview CVE-2025-31200 is a buffer overflow vulnerability in Apple's CoreAudio framework affecting the Apple Positional Audio Codec APAC decoder. The bug exists in the APACChannelRemapper::Process function within...
OffensiveCon25 Conference Slides
OffensiveCon25 conference slides for topics Breaking the Sound Barrier: Exploiting CoreAudio via Mach Message Fuzzing, How Offensive Security Made Me Better at Defense, Finding and Exploiting 20-Year-Old Bugs in Web Browsers, and Entrysign: Create Your Own x86 Microcode for Fun and Profit...
Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of APAC...
About the security content of visionOS 26.3
About the security content of visionOS 26.3 This document describes the security content of visionOS 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of watchOS 26.3
About the security content of watchOS 26.3 This document describes the security content of watchOS 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...
About the security content of macOS Sequoia 15.7.4
About the security content of macOS Sequoia 15.7.4 This document describes the security content of macOS Sequoia 15.7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of tvOS 26.3
About the security content of tvOS 26.3 This document describes the security content of tvOS 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of macOS Sonoma 14.8.4
About the security content of macOS Sonoma 14.8.4 This document describes the security content of macOS Sonoma 14.8.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
EUVD-2010-0068
Malware in sbrugna...
EUVD-2007-3731
Malware in sbrugna...
EUVD-2017-11685
Malware in sbrugna...
EUVD-2010-0092
Malware in sbrugna...
EUVD-2011-3216
Malware in sbrugna...
EUVD-2017-16046
Malware in sbrugna...
EUVD-2009-2202
Malware in sbrugna...
EUVD-2007-3729
Malware in sbrugna...