Corellium 7.7.0 is live, delivering expanded support for Apple’s latest hardware, early access to emerging memory protections, deeper configuration control, and a new way to quantify mobile application risk. Corellium has always delivered high-fidelity virtual devices for security testing. This release takes it further, introducing the newest device models and OS versions so teams can validate findings against real-world conditions with unmatched accuracy.
From Coverage Gaps to Risk Scoring: Elevating Mobile Security Strategy
MATRIX Score: From Static Findings to Actionable Metrics
We’ve expanded MATRIX with a Risk Score, giving teams a real-time, dynamic scoring system that quantifies mobile app risk based on detected vulnerabilities and their severities—across both Android and Apple platforms. The score reflects actual findings, updates automatically as issues are addressed, and includes full audit logging for compliance, governance, and reporting.
Security teams can customize findings directly in Corellium’s UI—adjust severity levels, nullify false positives, and focus on what truly matters. Every change instantly recalculates the risk score, providing a live, accurate view of application risk posture.
All actions—from severity adjustments to evidence suppression—are recorded in an immutable audit log, making it easier to demonstrate progress, support audits, and track outcomes over time.
What’s included:
- Dynamic scoring based on app risks and vulnerability findings
- Real-time updates as vulnerabilities are reclassified or remediated
- Immutable audit logging for compliance, traceability, and reporting
Why it matters:
MATRIX turns mobile security testing into a living metric that evolves with your remediation efforts, giving you continuous visibility, measurable progress, and defensible proof of compliance when it matters most.
Key benefits:
- Quantify mobile risk in real time. The MATRIX Score translates raw vulnerability data into a single, dynamic number that gives testers and executives a live view of overall mobile application risk.
- Reflect your true security posture. As findings are remediated or severities change, the score recalculates automatically, so stakeholders always see the most accurate state of risk.
- Simplify compliance validation. Every action, from nullification to severity changes or evidence updates, is logged immutably to prove due diligence and maintain audit readiness.
Memory Integrity Enforcement (MIE) Support on iPhone 17
We’ve added support for Apple’s Memory Integrity Enforcement (MIE) via Arm’s Memory Tagging Extension (MTE), implemented in instruction-only mode.
- iPhone 17 models can now execute MIE instructions
- Hardware tag enforcement is disabled; no runtime enforcement semantics
- Researchers can observe instruction behavior and integration with Apple’s runtime
Why it matters:
This gives security researchers early visibility into Apple’s latest memory protection framework. Teams can study how MIE instructions interact with the OS and analyze potential effects on security tooling and runtime behavior—all within a controlled, virtualized environment.
Test What Your Users Actually Use
Now supporting the full iPhone 17 lineup:
- iPhone 17
- iPhone 17 Pro
- iPhone 17 Pro Max
- iPhone Air
iOS/iPad OS:
- iOS 15.8.5
- iOS 16.7.12
- iOS/iPad OS 18.7.x
- iOS/iPad OS 26.0.x
Android:
- Android 16
This enables security teams to validate applications, analyze system behavior, and investigate vulnerabilities on Android and Apple devices.
More Flexible Virtual Device Configuration
Creating a new virtual device is now more flexible and aligned with real-world hardware profiles. You can specify the primary storage size directly during setup—whether you're in Advanced Boot Options or the Configure Your Device flow. The UI adapts based on platform:
- iOS and Android users get dropdowns with valid storage sizes based on the selected firmware flavor
- IoT flavors offer either step-based inputs or predefined options, depending on configuration constraints
Test What Others Can’t. Measure What Others Don’t
With support for iOS 26, the latest iPhone 17 models, and dynamic MATRIX risk scoring, 7.7 introduces functionality you won’t find in any other platform. Request a meeting with Corellium to start testing today.
Keep reading
Mobile Application Development Isn’t Just for iPhones - Enable More Through iPad App Testing
iOS/iPadOS 26 and the “Trust, but Can’t Verify” Crisis
