Researchers run unmodified iOS 16.5 on Android hardware without flashing

A research group has successfully booted unmodified iOS 16.5 firmware on Android smartphone hardware, demonstrating that Apple’s operating system can run outside its native ecosystem without permanent device modification. According to the project documentation, the system operates entirely in memory and reverts to Android upon reboot.

The initiative, led by OOSEX GANG, uses Apple’s open-source XNU kernel alongside custom drivers to bridge the hardware gap. This allows standard iOS applications to launch on a POCO X5 Pro 5G device, proving that the software stack can function on incompatible silicon through significant engineering effort.

What we know

The project targets the POCO X5 Pro 5G, which uses a Snapdragon 778G processor, and a QEMU virtual environment. The team developed an EFI loader and replaced closed Apple drivers with open-source alternatives, including a Linux Wi-Fi driver on a compatibility layer. No Apple proprietary files are included in the repositories; instead, a script downloads the iOS 16.5 IPSW from Apple’s CDN.

Functionality includes the lock screen, home screen, and system gestures such as swiping for the app switcher. Standard applications like Settings, Safari, and Camera operate correctly. The Adreno 642L GPU renders graphics via Mesa/freedreno, with progress on Metal shader support. Wi-Fi connectivity reaches speeds of 55 to 90 Mbit/s using the ath11k driver.

App Store content and Apple ID sign-in work, although the Secure Enclave does not function and the FairPlay daemon exits. The system is described as a research bench rather than a usable ROM, with sessions lasting a predetermined number of seconds before returning logs to the loader.

Defender's checklist

• Verify that device bootloaders are locked to prevent unauthorized kernel loading.
• Monitor for unexpected network traffic that may indicate experimental software execution.
• Ensure that sensitive data is encrypted at rest and not accessible from RAM-based sessions.
• Review device logs for signs of non-standard operating system components or drivers.

The background in plain language

Operating systems rely on a kernel to manage hardware resources. Apple’s iOS uses the XNU kernel, which is partially open-source. Researchers often modify these kernels to run on different hardware for educational purposes. This process requires replacing proprietary drivers with open-source equivalents that can communicate with the new hardware. Such experiments help teams understand how software interacts with hardware, but they typically lack the security features present in commercial products.

What to do and how to stay safe: iOS

• Ensure your device’s bootloader remains locked to prevent the execution of unsigned or modified operating systems.
• Monitor network activity for unusual connections that might indicate the presence of experimental or unauthorized software.
• Keep your device’s firmware updated to protect against known vulnerabilities in the boot process.
• Once the vendor provides an update, apply it promptly to maintain the integrity of your device’s security model.

General security guidance from the TechWire Beat newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Does this project allow users to install iOS permanently on their Android phones?

No, the system runs entirely in RAM and reverts to Android after a reboot, with no permanent flashing required.

Can users access the App Store and use their Apple ID fully?

Yes, App Store content and Apple ID sign-in work, but the Secure Enclave does not function and the FairPlay daemon exits.

Is this project affiliated with Apple?

No, it is an independent research project by OOSEX GANG and is not authorised or endorsed by Apple Inc.