If this aims to enumerate all the vectors, it seems to be missing the lower leve...

fulafel on Aug 8, 2019 | parent | context | favorite | on: The Fully Remote Attack Surface of the iPhone

If this aims to enumerate all the vectors, it seems to be missing the lower level radio & networking attack surface - eg the WLAN one that was a high-profile Project Zero finding some time ago. And common networking things like DHCP client, mDNS, VPN protocols, etc. Probably there are WLAN driver style vulnerabilities in the cellular side too.

bowmessage on Aug 8, 2019 [–]

I was thinking phone-over-WiFi would be interesting to explore as well.