CVE-2025-31201

A flaw in Pointer Authentication on Apple devices could allow someone with read/write access to memory to bypass a security protection designed to prevent unauthorized code execution. This is a critical protection that makes it harder for attackers to take full control of your device.

This vulnerability exploits insufficient validation in Pointer Authentication Code (PAC) implementation, allowing an attacker with arbitrary memory read/write capabilities (via prior code execution or memory corruption) to forge or modify PAC values and execute arbitrary code. The fix involved removing the vulnerable code path entirely; affects iOS, iPadOS, macOS, tvOS, and visionOS across multiple versions.