Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

First analysis of Apple's USB Restricted Mode bypass (CVE-2025-24200)

blog.quarkslab.com | vulnerability | CVE-2025-24200 | #reverse-engineering | #ios | #vulnerability | #apple | #usb-restricted-mode | #cve-2025-24200

Summary

Quarkslab analyzes CVE-2025-24200, fixed in iOS 18.3.1: an Accessibility flaw that let a physical attack disable USB Restricted Mode on locked iPhones, exploited against targeted individuals.
Published
Collected

original ↗

Related coverage

  1. Reverse engineering of Apple's iOS 0-click CVE-2025-43300: 2 bytes that make size matter (blog.quarkslab.com)
  2. On Apple, Encryption, and Privacy (bishopfox.com)
  3. The issue with ATS in Apple’s macOS and iOS (blog.trailofbits.com)
  4. Tethered jailbreaks are back (blog.trailofbits.com)
  5. If You Can't Break Crypto, Break the Client: Recovery of Plaintext iMessage Data (bishopfox.com)
  6. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)

back