CVE-2025-31253
📋 TL;DR
This vulnerability in iOS/iPadOS FaceTime allows audio to continue transmitting even when the microphone is muted during calls. This affects users of Apple devices running vulnerable iOS/iPadOS versions who use FaceTime with the mute feature.
💻 Affected Systems
- iOS
- iPadOS
📦 What is this software?
Ipados by Apple
⚠️ Risk & Real-World Impact
Worst Case
Sensitive conversations continue to be transmitted to call participants even when users believe they have muted themselves, potentially exposing confidential information.
Likely Case
Users unintentionally share private audio during FaceTime calls when they believe they have muted themselves, leading to privacy violations.
If Mitigated
No audio privacy impact when proper patching is applied and users verify mute functionality works correctly.
🎯 Exploit Status
Exploitation is passive - simply being on a FaceTime call with a vulnerable user who mutes themselves could expose audio. No special attacker action required beyond normal call participation.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: iOS 18.5, iPadOS 18.5
Vendor Advisory: https://support.apple.com/en-us/122404
Restart Required: Yes
Instructions:
1. Open Settings app. 2. Tap General. 3. Tap Software Update. 4. Download and install iOS 18.5/iPadOS 18.5. 5. Restart device when prompted.
🔧 Temporary Workarounds
Avoid FaceTime mute
allDo not rely on mute functionality during FaceTime calls on vulnerable devices
Use alternative communication
allUse other video/audio calling apps that don't have this vulnerability
🧯 If You Can't Patch
- Avoid using FaceTime for sensitive conversations
- Physically disconnect or cover device microphone when privacy is required
🔍 How to Verify
Check if Vulnerable:
Check iOS/iPadOS version in Settings > General > About > Software Version. If version is earlier than 18.5, device is vulnerable.Check Version:
Settings > General > About > Software VersionVerify Fix Applied:
After updating to iOS/iPadOS 18.5, test FaceTime mute functionality with another device to confirm audio is properly silenced.📡 Detection & Monitoring
Log Indicators:
- No specific log indicators for this vulnerability as it's a privacy issue rather than an active attack
Network Indicators:
- No network-based detection as this is a client-side privacy issue
SIEM Query:
Not applicable - this is a client-side privacy vulnerability without active exploitation indicators