Fuzzing iOS code on macOS at native speed

Summary: Google Project Zero's Samuel Groß published a tool that runs arbitrary iOS binaries and libraries natively on Apple Silicon Macs, exploiting the shared arm64 ISA, macOS's compatible runtime libraries, and /System/iOSSupport. Launching an iOS binary requires the undocumented posix_spawnattr_set_platform_np to set PLATFORM_IOS, then runtime patching of dyld to bypass AMFI's denial of library interposing for iOS binaries, with SIP disabled and testing on macOS 11.2 and 11.3.
What's compelling: The tool was built to fuzz a third-party iOS messaging app and is now public to lower the barrier for iOS security research - meaning the same native-speed fuzzing capability is available to anyone targeting iOS code, not just Project Zero.

Read the original at Google Project Zero ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026