The Patching Friars' AlmanacA calendar of CVE saints

Feast day March 1

TrigonHoly card for trigon, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Trigon NUMQUAM CADIT
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Trigon, the Exploit That Never Falls

Patron of old iPhones, patient jailbreakers, and multiplications that overflow.

Life

In 2025 Alfie CG published Trigon, an iOS kernel exploit built on CVE-2023-32434, an integer overflow in mach_make_memory_entry: the same bug used in the Operation Triangulation campaign and fixed by Apple in iOS 16.5.1. Its virtue was determinism: designed never to fail and never to panic the kernel, unlike exploits that work by trial and error. A reliable saint, a rare thing in his line of work.

Prayer

O Saint Trigon, who never misses, watch over our iPhones forgotten in drawers and their firmware frozen in time. Amen.

How to celebrate

Celebrated by updating iOS, or by keeping an old un-updated iPhone aside for feast days.

Who never fumbles never tumbles.

Technical record

Disclosed on
March 1 2025
CVE
CVE-2023-32434
CVSS
7.8Actively exploited (CISA KEV)
Product
Apple · macOS

An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.

Sources: alfiecg.uk · theapplewiki.com

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.