CVE-2025-24203
MEDIUMiPadOS < 17.7.6 - Arbitrary File System Modification
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2025-24203. PoCs published by jailbreakdotparty, GeoSn0w, pxx917144686.
AI-analyzed exploit summary This repository provides a toolbox that leverages CVE-2025-24203 to temporarily disable or modify iOS system files in memory, offering various customization tweaks for iOS 16.0 to 18.3.2. The exploit does not persist across reboots and requires a respring to apply changes.
Description
The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system.
Exploits (4)
This repository provides a toolbox that leverages CVE-2025-24203 to temporarily disable or modify iOS system files in memory, offering various customization tweaks for iOS 16.0 to 18.3.2. The exploit does not persist across reboots and requires a respring to apply changes.
This is a privilege escalation exploit for CVE-2025-24203 targeting iOS 16.0 to 18.3.2, leveraging memory manipulation via `vm_behavior_set` and `mlock` to achieve effects similar to MacDirtyCow. The PoC includes improved error logging for research purposes.
This repository contains a working proof-of-concept exploit for CVE-2025-24203, a vulnerability in XNU's VM_BEHAVIOR_ZERO_WIRED_PAGES that allows writing to read-only pages by leveraging mlock and vm_deallocate to zero out physical memory pages. The exploit demonstrates how to modify read-only, root-owned files on iOS 16.0 to 18.3.2.
The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.
References (12)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N