Could someone take over an iPhone nearby without its owner tapping anything? In a 2020 research demonstration, Google Project Zero researcher Ian Beer described a zero-click exploit involving Apple Wireless Direct Link (AWDL) that compromised a nearby iPhone 11 Pro. Beer said Apple fixed the specific issue before iOS 13.5 launched in May 2020, and he reported no evidence that it had been exploited in the wild. The demonstration is a historical security finding, not evidence that current, updated iPhones remain vulnerable.
What Ian Beer’s iPhone exploit demonstrated
Beer published “An iOS zero-click radio proximity exploit odyssey” on December 1, 2020. He wrote that developing the research demonstration took around six months. Its target was an iPhone 11 Pro, and the exploit he described could compromise a nearby device without requiring the owner to click or tap anything.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Apple iPhone 12, 64GB, Black - Unlocked (Renewed) | $185.00 | Buy on Amazon |
| 2 |
|
Apple iPhone 12, 64GB, Blue - Unlocked (Renewed) | $199.00 | Buy on Amazon |
| 3 |
|
Apple iPhone 12, 128GB, Blue - Unlocked (Renewed) | $227.00 | Buy on Amazon |
| 4 |
|
Apple iPhone 12 Mini, 128GB, Black - Unlocked (Renewed) | $173.80 | Buy on Amazon |
| 5 |
|
Apple iPhone 12 Pro, 128GB, Graphite - Unlocked (Renewed) | $278.74 | Buy on Amazon |
In Beer’s account, one memory-corruption vulnerability in iOS kernel code was enough for him to defeat mitigations and achieve native code execution, along with the ability to read and write kernel memory. He said the demonstrated capabilities included accessing personal data and monitoring activity in real time. These are claims about what his proof of concept achieved on the tested device—not findings about current iOS versions or the prevalence of real-world attacks.
How AWDL and the kernel flaw fit together
The research concerned Apple Wireless Direct Link, or AWDL, a wireless protocol used by Apple features including AirDrop. The relevant security issue was not simply that AirDrop existed: Beer described untrusted data reaching a parser in iOS kernel code, where a buffer overflow created a path to memory corruption.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11#1 Best Overall
- Fully unlocked and compatible with any carrier of choice (e.g. AT&T, T-Mobile, Sprint, Verizon, US-Cellular, Cricket, Metro, etc.).
- Inspected and guaranteed to have minimal cosmetic damage, which is not noticeable when the device is held at arm's length.
- Successfully passed a full diagnostic test which ensures like-new functionality and removal of any prior-user personal information.
- The device does not come with headphones or a SIM card. It does include a charging cable that may be generic.
- Tested for battery health and guaranteed to have a minimum battery capacity of 80%.
In plain terms, the flaw let specially crafted data reach code with deep system privileges. The significance of Beer’s result was that he demonstrated a route from that single memory-corruption issue to kernel-level compromise on the iPhone 11 Pro. It does not mean that every iPhone attack works this way, or that AirDrop should be treated as a current vulnerability.
What the reported demonstrations show—and don’t show
CyberScoop’s December 2, 2020 report described a 15-second demonstration clip and a longer video depicting an attack across a room and through a closed door. Those clips helped illustrate the radio-proximity concept, but they should not be read as a measurement of typical attack range or as evidence that an attacker could reliably reach any iPhone from a particular distance.
Rank #2
- This phone is unlocked and compatible with any carrier of choice on GSM and CDMA networks (e.g. AT&T, T-Mobile, Sprint, Verizon, US Cellular, Cricket, Metro, Tracfone, Mint Mobile, etc.).
- Please check with your carrier to verify compatibility.
- When you receive the phone, insert a SIM card from a compatible carrier. Then, turn it on, connect to Wi-Fi, and follow the on screen prompts to activate service.
Beer’s own account gives the clearest limit on what was established: “I have no evidence that these issues were exploited in the wild; I found them myself through manual reverse engineering.” A technically powerful proof of concept is not the same as a confirmed attack campaign.
When Apple fixed the issue
Beer stated that “This specific issue was fixed before the launch of Privacy-Preserving Contact Tracing in iOS 13.5 in May 2020.” That is the patch timing he gave for the issue in his research. The finding was therefore already fixed before the December 2020 disclosure.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #3
- Fully unlocked and compatible with any carrier of choice (e.g. AT&T, T-Mobile, Sprint, Verizon, US-Cellular, Cricket, Metro, etc.).
- Inspected and guaranteed to have minimal cosmetic damage, which is not noticeable when the device is held at arm's length.
- Successfully passed a full diagnostic test which ensures like-new functionality and removal of any prior-user personal information.
- The device does not come with headphones or a SIM card. It does include a charging cable that may be generic.
- Tested for battery health and guaranteed to have a minimum battery capacity of 80%.
Apple’s security-content notice for iOS 13.5.1 and iPadOS 13.5.1 lists a June 1, 2020 release date and describes CVE-2020-9859 as a kernel issue addressed through improved memory handling. The notice does not name AWDL or identify Beer’s specific issue, so it does not establish that CVE-2020-9859 was the vulnerability in his demonstration or specify the release that fixed it.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Why researchers called the exploit a “work of art”
The praise reflected the technical achievement in Beer’s account: he demonstrated kernel-level compromise with one memory-corruption vulnerability rather than a chain of multiple vulnerabilities. CyberScoop quoted Rob Joyce, identified in its report as an NSA senior adviser, calling an iOS exploit that did not involve chaining vulnerabilities “quite an accomplishment.”
Rank #4
- This phone is unlocked and compatible with any carrier of choice on GSM and CDMA networks (e.g. AT&T, T-Mobile, Sprint, Verizon, US Cellular, Cricket, Metro, Tracfone, Mint Mobile, etc.).
- Please check with your carrier to verify compatibility.
- When you receive the phone, insert a SIM card from a compatible carrier. Then, turn it on, connect to Wi-Fi, and follow the on screen prompts to activate service.
- Accessories will not be original, but will be compatible and fully functional. Product may come in generic Box.
- Tested for battery health and guaranteed to have a minimum battery capacity of 80%.
The phrase “work of art” came from researcher Patrick Wardle, whom CyberScoop quoted as describing Beer’s “lockdown project” that way. It was praise for the research, not an official technical classification.
Quick Recap
Best Value
- Fully unlocked and compatible with any carrier of choice (e.g. AT&T, T-Mobile, Sprint, Verizon, US-Cellular, Cricket, Metro, etc.).
- Inspected and guaranteed to have minimal cosmetic damage, which is not noticeable when the device is held at arm's length.
- Successfully passed a full diagnostic test which ensures like-new functionality and removal of any prior-user personal information.
- The device does not come with headphones or a SIM card. It does include a charging cable that may be generic.
- Tested for battery health and guaranteed to have a minimum battery capacity of 80%.
What iPhone owners should take away
- This was a specific 2020 research demonstration involving AWDL-related handling of untrusted data in iOS kernel code.
- Beer said Apple fixed the specific issue before iOS 13.5 launched in May 2020.
- Beer reported no evidence that the issues had been exploited in the wild.
- The finding does not show that currently updated iPhones are vulnerable, and the cited sources do not establish a current exploit or attack campaign.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
