SecurityPaper

Zero-Click Exploit Chain Analysis(Apr 2026)

Anatomy of the 2025 WhatsApp/ImageIO zero-click attack, with labs and a paper

A security research deep dive into the 2025 WhatsApp zero-click attack: how CVE-2025-55177 and CVE-2025-43300 chain from a malicious message to memory corruption in Apple's ImageIO. The site walks through the exploit chain step by step with patch diffs and hands-on heap and stack corruption labs, and condenses the analysis into an IEEE-format paper.

Zero-Click, Old Tricks - landing page with the attack statistics

The exploit chain visualized stage by stage, attacker to RCE