{"id":39150,"date":"2025-05-17T23:22:50","date_gmt":"2025-05-17T23:22:50","guid":{"rendered":""},"modified":"2025-07-07T11:08:52","modified_gmt":"2025-07-07T17:08:52","slug":"cve-2025-30436-siri-vulnerability-enabling-auto-answer-calls-on-locked-ios-devices","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-30436-siri-vulnerability-enabling-auto-answer-calls-on-locked-ios-devices\/","title":{"rendered":"CVE-2025-30436: Siri Vulnerability Enabling Auto-Answer Calls on Locked iOS Devices<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

In today’s digital age, cybersecurity has become a matter of paramount importance. With the increasing reliance on mobile devices, particularly Apple’s iOS and iPadOS, the need for substantial security measures is undeniable. However, even the most robust systems may have vulnerabilities<\/a>, such as the recently discovered CVE-2025-30436, which can have severe implications if exploited.
\nThe CVE-2025-30436 vulnerability is a serious security<\/a> issue affecting Apple’s iOS and iPadOS platforms. It allows attackers to manipulate Siri into enabling Auto-Answer Calls on locked devices, potentially leading to system compromise or data<\/a> leakage. This vulnerability underscores the continuous need for vigilance in maintaining cybersecurity defenses<\/a> and ensuring that systems are patched with the latest security updates.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-30436
\nSeverity: Critical (CVSS: 9.1)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: Potential system compromise<\/a> or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Apple iOS | Prior to 18.4
\nApple iPadOS | Prior to 18.4<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The exploit hinges on leveraging Siri’s functionality on locked devices. The attacker initiates a request to Siri to enable Auto-Answer Calls. If successful, the attacker can then make a call to the compromised device, which will be automatically answered, granting the attacker potential access<\/a> to any audio input or output from the device. This could potentially lead to unauthorized eavesdropping or data<\/a> leakage.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

While the vulnerability is not exploited through traditional code<\/a>, the exploitation process could conceptually be represented as follows:<\/p>\n

BEGIN\nRequest Siri on target device: \"Enable Auto-Answer Calls\"\nIF request is successful\nInitiate call to target device\nIF call is auto-answered\nAccess to device's audio input\/output is granted\nEND IF\nEND IF\nEND<\/code><\/pre>\n
It’s important to note that the actual exploitation process would involve specific spoken commands and potentially<\/a> sophisticated voice manipulation techniques, rather than the simple programmatic approach outlined above.
\nThe mitigation for this vulnerability is straightforward: apply the vendor-supplied patch in iOS 18.4 or iPadOS 18.4. If this is not possible, a Web Application Firewall (WAF) or Intrusion Detection System (IDS) could be used as a temporary mitigation strategy. However, these are not full-proof solutions and the best course of action is updating the system to the latest<\/a> version.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview In today’s digital age, cybersecurity has become a matter of paramount importance. With the increasing reliance on mobile devices, particularly Apple’s iOS and iPadOS, the need for substantial security measures is undeniable. However, even the most robust systems may have vulnerabilities, such as the recently discovered CVE-2025-30436, which can have severe implications if exploited. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[77],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-39150","post","type-post","status-publish","format-standard","hentry","category-uncategorized","vendor-apple"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t