CVE-2025-31200

CVE-2025-31200: Desbordamiento de búfer en el reasignación de canales APAC de CoreAudio Resumen de la vulnerabilidad CVE-2025-31200 es una vulnerabilidad de desbordamiento de búfer en el framework CoreAudio de Apple que afecta al decodificador del códec de audio posicional de Apple APAC. El fallo...

iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201

CVE-2025-31200 y CVE-2025-31201 | Cadena RCE zero-click de iMessage Resumen Este repositorio documenta la investigación de una cadena de explotación remota zero-click que afecta a iOS 18.x y versiones posteriores. Un archivo de audio AMR malformado enviado a través de iMessage desencadena: 1...

apple-positional-audio-codec-invalid-header

Prueba de concepto para el parche de CoreAudio CVE-2025-31200 en iOS 18.4.1. Artículo aquí https://blog.noahhw.dev/posts/cve-2025-31200/. Actualización 27/05/2025 He logrado llevar esto a una escritura controlada , aunque no arbitraria. El artículo está por venir. Sin embargo, para comprobarlo po...

Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of APAC...

About the security content of macOS Sonoma 14.8.4

About the security content of macOS Sonoma 14.8.4 This document describes the security content of macOS Sonoma 14.8.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of tvOS 26.3

About the security content of tvOS 26.3 This document describes the security content of tvOS 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of watchOS 26.3

About the security content of watchOS 26.3 This document describes the security content of watchOS 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

About the security content of macOS Sequoia 15.7.4

About the security content of macOS Sequoia 15.7.4 This document describes the security content of macOS Sequoia 15.7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of visionOS 26.3

About the security content of visionOS 26.3 This document describes the security content of visionOS 26.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

EUVD-2007-3729

Malware in sbrugna...

EUVD-2010-0091

Malware in sbrugna...

EUVD-2017-11685

Malware in sbrugna...

EUVD-2011-3216

Malware in sbrugna...

EUVD-2007-3730

Malware in sbrugna...

EUVD-2009-2202

Malware in sbrugna...

EUVD-2010-0068

Malware in sbrugna...

EUVD-2010-0092

Malware in sbrugna...

EUVD-2007-3731

Malware in sbrugna...

EUVD-2017-16046

Malware in sbrugna...

The vulnerability of the CoreAudio component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS systems allows attackers to trigger a service failure.

The vulnerability of the CoreAudio component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS stems from the operation of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause system failures...