logo

Zimperium zLabs iOS Security Advisories

ID: b2e47d7f-e550-5519-a90d-c53ad9928457

STIX ID: report--b2e47d7f-e550-5519-a90d-c53ad9928457

Feed Name: Zimperium Blog

Threat Score
75/100

Date Published: 2017-07-20

Date Updated: 2026-05-01

...
...

## Executive summary zLab researchers discovered multiple severe vulnerabilities in Apple's AppleAVE.kext and IOSurface.kext affecting iOS devices running 10.3.1 or earlier, enumerated as eight CVEs that enable information disclosure and local privilege escalation up to arbitrary kernel read/write and root; Apple released fixes in iOS 10.3.2 and the researchers intend to release additional technical details and a PoC after responsible disclosure efforts.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.