PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

First analysis of Apple's USB Restricted Mode bypass (CVE-2025-24200)

blog.quarkslab.com | vulnerability | CVE-2025-24200 | #reverse-engineering | #ios | #vulnerability | #apple | #usb-restricted-mode | #cve-2025-24200
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab analyzes CVE-2025-24200, fixed in iOS 18.3.1: an Accessibility flaw that let a physical attack disable USB Restricted Mode on locked iPhones, exploited against targeted individuals.
CVE
CVE-2025-24200
Published
Collected

Related coverage

vulnerability · calif.io
[CVE-2026-20643] Reverse engineering Apple's silent security fixes
Diffing a Background Security Improvement to recover the fixes Apple shipped without disclosing them.
vulnerability · calif.io
[CVE-2025-31207] Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild
# Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild Five apps, and what each of them does to stop you attaching a debugger. Huy Nguyen March 17, 2026 applereversing Contents 1....
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · calif.io
Apple Internals: Endpoint Security ships in iOS 27.2 beta
# Apple Internals: Endpoint Security ships in iOS 27.2 beta Is antivirus coming to iPhone? Josh Maine September 18, 2026 apple Contents 1. Apple Internals: Endpoint Security ships in iOS 27.2 beta...
research · calif.io
Learning to Jailbreak an iPhone with Claude (Part 1)
Claude helped me take apart an iOS Safari exploit, and retune it for my Mac. It even wrote its own variant.
Back