Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Reverse engineering of Apple's iOS 0-click CVE-2025-43300: 2 bytes that make size matter

blog.quarkslab.com | vulnerability | Critical | Actively exploited | CVE-2025-43300 | #reverse-engineering | #ios | #apple | #cve-2025-43300 | #imageio | #zero-click

Summary

Quarkslab's root-cause analysis of CVE-2025-43300, the iOS ImageIO out-of-bounds write exploited in zero-click campaigns; patch diffing points to RawCamera and DNG parsing.
CVSS
10
Published
Collected

original ↗

Related coverage

  1. First analysis of Apple's USB Restricted Mode bypass (CVE-2025-24200) (blog.quarkslab.com)
  2. On Apple, Encryption, and Privacy (bishopfox.com)
  3. The issue with ATS in Apple’s macOS and iOS (blog.trailofbits.com)
  4. Tethered jailbreaks are back (blog.trailofbits.com)
  5. If You Can't Break Crypto, Break the Client: Recovery of Plaintext iMessage Data (bishopfox.com)
  6. The iOS FaceTime vulnerability: What it means and what you can do to protect yourself (bugcrowd.com)

back