{"schema":"vulnpedia.research/1","cve":"CVE-2025-31200","references":[{"url":"https://support.apple.com/en-us/122282","tags":["Release Notes","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:25:21.000Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:25:21.000Z","url":"https://support.apple.com/en-us/122282"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"https://support.apple.com/en-us/122282"},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://support.apple.com/en-us/122282"}]},{"url":"https://support.apple.com/en-us/122400","tags":["Release Notes","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:25:21.000Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:25:21.000Z","url":"https://support.apple.com/en-us/122400"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"https://support.apple.com/en-us/122400"},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://support.apple.com/en-us/122400"}]},{"url":"https://support.apple.com/en-us/122401","tags":["Release Notes","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:25:21.000Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:25:21.000Z","url":"https://support.apple.com/en-us/122401"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"https://support.apple.com/en-us/122401"},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://support.apple.com/en-us/122401"}]},{"url":"https://support.apple.com/en-us/122402","tags":["Release Notes","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:25:21.000Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:25:21.000Z","url":"https://support.apple.com/en-us/122402"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"https://support.apple.com/en-us/122402"},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://support.apple.com/en-us/122402"}]},{"url":"https://support.apple.com/en-us/122722","tags":["Release Notes","Vendor Advisory"],"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:25:21.000Z","origins":[{"source":"mitre","sourceId":"apple","modified":"2026-04-02T18:25:21.000Z","url":"https://support.apple.com/en-us/122722"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"https://support.apple.com/en-us/122722"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31200","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-02-26T18:28:12.610Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-02-26T18:28:12.610Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31200"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31200"}]},{"url":"https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md","tags":["technical-description","Broken Link","Exploit"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-02-26T18:28:12.610Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-02-26T18:28:12.610Z","url":"https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md"}]},{"url":"https://github.com/cisagov/vulnrichment/issues/200","tags":["issue-tracking","Issue Tracking"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-02-26T18:28:12.610Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-02-26T18:28:12.610Z","url":"https://github.com/cisagov/vulnrichment/issues/200"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"https://github.com/cisagov/vulnrichment/issues/200"}]},{"url":"https://blog.noahhw.dev/posts/cve-2025-31200/","tags":["Broken Link","Exploit"],"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","url":"https://blog.noahhw.dev/posts/cve-2025-31200/"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"https://blog.noahhw.dev/posts/cve-2025-31200/"}]},{"url":"https://news.ycombinator.com/item?id=44161894","tags":["Issue Tracking"],"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","url":"https://news.ycombinator.com/item?id=44161894"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"https://news.ycombinator.com/item?id=44161894"}]},{"url":"http://seclists.org/fulldisclosure/2025/Oct/4","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","url":"http://seclists.org/fulldisclosure/2025/Oct/4"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"http://seclists.org/fulldisclosure/2025/Oct/4"}]},{"url":"http://seclists.org/fulldisclosure/2025/Oct/0","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","url":"http://seclists.org/fulldisclosure/2025/Oct/0"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"http://seclists.org/fulldisclosure/2025/Oct/0"}]},{"url":"http://seclists.org/fulldisclosure/2025/Jun/14","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","url":"http://seclists.org/fulldisclosure/2025/Jun/14"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"http://seclists.org/fulldisclosure/2025/Jun/14"}]},{"url":"http://seclists.org/fulldisclosure/2025/May/10","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","url":"http://seclists.org/fulldisclosure/2025/May/10"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"http://seclists.org/fulldisclosure/2025/May/10"}]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/26","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2025-11-03T19:48:16.666Z","url":"http://seclists.org/fulldisclosure/2025/Apr/26"},{"source":"nvd","sourceId":"CVE-2025-31200","modified":"2026-06-17T09:10:00.550","url":"http://seclists.org/fulldisclosure/2025/Apr/26"}]},{"source":"euvd","sourceId":"EUVD-2025-11380","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-11380","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2025-11380","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-11380"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit"}]},{"url":"https://isc.sans.edu/diary/Apple%20Patches%20Exploited%20Vulnerability/31866","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://isc.sans.edu/diary/Apple%20Patches%20Exploited%20Vulnerability/31866"}]},{"url":"https://x.com/craiu/status/1912608175364145652","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://x.com/craiu/status/1912608175364145652"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://cyble.com/resources/research-reports/global-cybersecurity-report/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://cyble.com/resources/research-reports/global-cybersecurity-report/"}]},{"url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/zhuowei/apple-positional-audio-codec-invalid-header","source":"poc-in-github","sourceId":"CVE-2025-31200","description":"CVE-2025-31200 - @Noahhw46 figured it out","modified":"2026-10-05T11:05:35Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-31200","url":"https://github.com/zhuowei/apple-positional-audio-codec-invalid-header"},{"source":"poc-in-github","sourceId":"CVE-2025-31200","modified":"2026-10-05T11:05:35Z","url":"https://github.com/zhuowei/apple-positional-audio-codec-invalid-header"}],"tags":[]},{"url":"https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201","source":"poc-in-github","sourceId":"CVE-2025-31200","description":"CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025).","modified":"2026-10-23T06:14:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-31200","url":"https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201"},{"source":"poc-in-github","sourceId":"CVE-2025-31200","modified":"2026-10-23T06:14:54Z","url":"https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201"}],"tags":[]},{"url":"https://github.com/serundengsapi/CVE-2025-31200-iOS-AudioConverter-RCE","source":"poc-in-github","sourceId":"CVE-2025-31200","description":"Public disclosure of CVE-2025-31200 – Zero-click RCE in iOS 18.X via AudioConverterService and malicious audio file.","modified":"2026-04-14T06:14:21Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-31200","url":"https://github.com/serundengsapi/CVE-2025-31200-iOS-AudioConverter-RCE"},{"source":"poc-in-github","sourceId":"CVE-2025-31200","modified":"2026-04-14T06:14:21Z","url":"https://github.com/serundengsapi/CVE-2025-31200-iOS-AudioConverter-RCE"}],"tags":[]},{"url":"https://github.com/hunters-sec/CVE-2025-31200","source":"poc-in-github","sourceId":"CVE-2025-31200","description":"IOS audio buffer overflow CVE-2025-31200 POC","modified":"2026-09-09T01:43:53Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-31200","url":"https://github.com/hunters-sec/CVE-2025-31200"},{"source":"poc-in-github","sourceId":"CVE-2025-31200","modified":"2026-09-09T01:43:53Z","url":"https://github.com/hunters-sec/CVE-2025-31200"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2025-04-16T00:00:00Z","modified":"2025-04-16T00:00:00Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Apple","product":"Multiple Products","dueDate":"2025-05-08T00:00:00Z","cisaDateAdded":"2025-04-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","modified":"2025-04-16T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","catalog":"VulnCheck KEV","kind":"report","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","dateAdded":"2025-04-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit"},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","url":"https://isc.sans.edu/diary/Apple%20Patches%20Exploited%20Vulnerability/31866"},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","url":"https://support.apple.com/en-us/122282"},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","url":"https://support.apple.com/en-us/122400"},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","url":"https://support.apple.com/en-us/122401"},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","url":"https://support.apple.com/en-us/122402"},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","url":"https://x.com/craiu/status/1912608175364145652"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2025-04-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","catalog":"VulnCheck KEV","kind":"report","url":"https://cyble.com/resources/research-reports/global-cybersecurity-report/","dateAdded":"2025-12-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","url":"https://cyble.com/resources/research-reports/global-cybersecurity-report/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","catalog":"VulnCheck KEV","kind":"report","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","dateAdded":"2026-01-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-31200","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]}]}