How can I know if I've been affected by an Apple-patched vulnerability?

[matsan]

Reading about these actively exploited vulnerabilities and I have started to wonder how can I know if I've been affected? With many exploits in other devices and operating systems there are often ways to check or anti-virus applications, but on iOS/iPadOS nothing is available.
For example, 17.0.3 contains a fix for CVE-2023-5217 in libvpx - remote arbitrary code execution possible from decoding a movie. Sounds scary - how do I know if I've been hit, it's been more than a week since discovered?
Will the iOS sandbox protect me? Will a system reboot restore the system to a trusted state?

 

[matsan]

Google patched Chrome for this 2023-5217 on Sep 27 - https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html and "is aware that an exploit for CVE-2023-5217 exists in the wild."

 

[contacos]

I think the whole point of organisations, which offer things like "Pegasus" is unfortunately the premise of not knowing if you have been exposed to it. I'd also like to know if I have ever been in contact with it after listening to some Podcasts about it but unless you are a truly "important person" I doubt anyone is willing to do some forensics on your device

Edit: I guess the best bet is to enable "Lockdown Mode" but that one is blocking too many things that I actually need

 

[matsan]

I think the whole point of organisations, which offer things like "Pegasus" is unfortunately the premise of not knowing if you have been exposed to it. I'd also like to know if I have ever been in contact with it after listening to some Podcasts about it but unless you are a truly "important person" I doubt anyone is willing to do some forensics on your device

Edit: I guess the best bet is to enable "Lockdown Mode" but that one is blocking too many things that I actually need

Yes, true - Pegasus and the likes needs these zero-day exploits so it's specially worrisome with remote exploits.

 

[matsan]

I hope someone could give an answer to my question regarding reboot - will a device exposed to a remote exploit be able to detect a breach and will it boot properly?