Hacking Into iOS's VoLTE Implementation

Explore a critical security vulnerability in iOS devices' Voice over LTE (VoLTE) implementation during this conference talk from Hack In The Box Security Conference. Dive into the technical details of a flaw present since the inception of 4G VoLTE, stemming from improper implementation of GSMA guidelines in the iOS IMS SIP agent. Examine the root cause, potential risks to user privacy and security, and the challenges faced during discovery and disclosure to Apple. Learn about the vulnerability's impact on iPhones and Apple Watches, and discuss Apple's response and mitigation measures. Gain insights from experienced security researchers with backgrounds in cyber security consulting across various sectors and regions.

#HITB2023HKT D2T1 - Hacking Into IOS’s VOLTE Implementation - Rajanish Pathak & Hardik Mehta