Skip to content

AppEnumGuard 1.0.0

Choose a tag to compare

View all tags
@kolbicz kolbicz released this 02 Aug 00:32
· 15 commits to main since this release
v1.0.0
6aee004

AppEnumGuard 1.0.0

Initial tested release.

CVE

CVE-2025-31207 is a FrontBoard information-disclosure issue that lets a
sandboxed app infer which applications are installed from differing private
SpringBoardServices launch return codes. Apple fixed the underlying OS issue in
iOS/iPadOS 18.5.

Compatibility

  • iOS 17.0–17.3.1
  • Relaxin jailbreak
  • rootHide bootstrap and package architecture
  • arm64e devices; the tweak dylib is arm64e-only
  • Install the iphoneos-arm64e rootHide package; do not use a rootless build

Included assets

  • AppEnumGuard_1.0.0_roothide_iphoneos-arm64e.deb
  • AppEnumGuardTester_1.0.0_sandboxed.ipa

SHA-256

d4637d96fca670cca345130dd4603192d350023b22a9f4c70e59a8b9765e9af5  AppEnumGuard_1.0.0_roothide_iphoneos-arm64e.deb
a5f6143c1ca85a07d4f7722b6e38e29041623076d593a9f294160acf1daccf42  AppEnumGuardTester_1.0.0_sandboxed.ipa

Verification

On a vulnerable Relaxin/rootHide iOS 17 device with WhatsApp installed:

  • Without AppEnumGuard: target 9, missing 7 — tester reports FAIL.
  • With AppEnumGuard: target 7, missing 7 — tester reports PASS.

The tweak is a user-space mitigation for the published SpringBoardServices
side channel. It is not a substitute for Apple's complete iOS 18.5 fix.

Assets 4
Loading