V12
This gives us an arbitrary read, which we use to extract the Noise responder private key, allowing the server to impersonate the secure enclave. The server can then simply decrypt all incoming traffic meant for the enclave. This allows the owner of the untrusted server to steal all the phone numbers in your contacts.
