Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2025-24203 PoC — Apple iPadOS 安全漏洞

Source
Associated Vulnerability
Title:Apple iPadOS 安全漏洞 (CVE-2025-24203)
Description:The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system.
Description
Slightly improved exploit of the CVE-2025-24203 iOS vulnerability by Ian Beer of Google Project Zero
Readme
# CVE-2025-24203 Exploit (iOS 16.0 – 18.3.2)

Thhe CVE-2025-24203 C exploit, targeting iOS versions 16.0 through 18.3.2 on all devices. Exploit by Ian Beer, I just added better error logging and graceful failing :)

Originally discovered by **Ian Beer** of **Google Project Zero**, I slightly improved its error logging for use in iOS-related research tools over on <a href="https://idevicecentral.com">idevicecentral.com</a>, feel free to use freely.

---

## 🔍 Overview

- **CVE ID:** CVE-2025-24203
- **Affected Systems:** iOS 16.0 – 18.3.2
- **Exploit Type:** Privilege Escalation
- **Original Research:** [Google Project Zero Issue #391518636](https://project-zero.issues.chromium.org/issues/391518636)
- **Swift Port By:** [GeoSn0w](https://twitter.com/FCE365)
- **Official Tools Website:** [iDeviceCentral.com](https://idevicecentral.com)

---

## 📁 Usage
This is particularly usefult to overwrite various files in memory and achieve an effect similar to the MacDirtyCow exploit, thus allowing some iOS tweaks without being jailbroken. I use the exploit in my tool, iDevice Toolkit, so it's pre-configured to accept a file path to zero out.

File Snapshot

[4.0K] /data/pocs/5ffc7c349087a183b0228324000ed727c457676f ├── [1.6K] exploit.c └── [1.1K] README.md 0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →