carrier-explode iOS carrier and country bundles
ATT_USUnitedStates country bundle
  1. iOS 27.2 beta 1–2 image · build 72.7.2
  2. OTA · iOS 27.0+ · build 72.1
  3. iOS 27.0 – 27.0.1 image · build 72.0.2
  4. iOS 26.6 – 26.6.2 image · build 70.0.1
  5. iOS 26.5 – 26.5.2 image · build 70.0
  6. iOS 26.4 – 26.4.2 image · build 69.0
  7. iOS 26.3 – 26.3.1 image · build 68.0
  8. iOS 26.2 – 26.2.1 image · build 67.0
  9. iOS 26.1 image · build 66.0
  10. iOS 26.0 – 26.0.1 image · build 65.0.1
  11. OTA · iOS 17.5+ · build 58.1
  12. OTA · iOS 15.0+ · build 47.1
  13. OTA · iOS 14.6+ · build 46.4
  14. OTA · iOS 14.5+ · build 46.1
  15. OTA · iOS 14.1+ · build 45.1
  16. OTA · iOS 14.0+ · build 42.1
  17. OTA · iOS 13.4+ · build 41.1
  18. OTA · iOS 13.2+ · build 39.1
  19. OTA · iOS 13.1+ · build 38.1
  20. OTA · iOS 12.0+ · build 33.2
  21. OTA · iOS 11.2+ · build 31.1
  22. OTA · iOS 11.1+ · build 30.2
  23. OTA · iOS 11.0+ · build 29.2
  24. OTA · iOS 10.3.2+ · build 28.6
  25. OTA · iOS 10.3+ · build 28.5
  26. OTA · iOS 10.2+ · build 27.1
  27. OTA · iOS 10.0+ · build 26.1
  28. OTA · iOS 9.3+ · build 24.2
  29. OTA · iOS 9.2+ · build 23.1
  30. OTA · iOS 8.3+ · build 19.1
  31. OTA · iOS 8.0+ · build 17.1
  32. OTA · iOS 6.1+ · build 14.2
  33. OTA · iOS 3.1+ · build 5.6
  34. OTA · legacy · build 3.1
  35. OTA · iOS 13.4+ · build 41.1 · iPad
  36. OTA · iOS 13.3+ · build 40.1 · iPad
  37. OTA · iOS 11.1+ · build 30.1 · iPad
  38. OTA · iOS 8.1+ · build 18.1 · iPhone7,1
  39. OTA · iOS 6.1+ · build 14.1 · iPad
OTA · iOS 27.0+ · build 72.1 (39)
  1. iOS 27.2 beta 1–2 image · build 72.7.2
  2. OTA · iOS 27.0+ · build 72.1
  3. iOS 27.0 – 27.0.1 image · build 72.0.2
  4. iOS 26.6 – 26.6.2 image · build 70.0.1
  5. iOS 26.5 – 26.5.2 image · build 70.0
  6. iOS 26.4 – 26.4.2 image · build 69.0
  7. iOS 26.3 – 26.3.1 image · build 68.0
  8. iOS 26.2 – 26.2.1 image · build 67.0
  9. iOS 26.1 image · build 66.0
  10. iOS 26.0 – 26.0.1 image · build 65.0.1
  11. OTA · iOS 17.5+ · build 58.1
  12. OTA · iOS 15.0+ · build 47.1
  13. OTA · iOS 14.6+ · build 46.4
  14. OTA · iOS 14.5+ · build 46.1
  15. OTA · iOS 14.1+ · build 45.1
  16. OTA · iOS 14.0+ · build 42.1
  17. OTA · iOS 13.4+ · build 41.1
  18. OTA · iOS 13.2+ · build 39.1
  19. OTA · iOS 13.1+ · build 38.1
  20. OTA · iOS 12.0+ · build 33.2
  21. OTA · iOS 11.2+ · build 31.1
  22. OTA · iOS 11.1+ · build 30.2
  23. OTA · iOS 11.0+ · build 29.2
  24. OTA · iOS 10.3.2+ · build 28.6
  25. OTA · iOS 10.3+ · build 28.5
  26. OTA · iOS 10.2+ · build 27.1
  27. OTA · iOS 10.0+ · build 26.1
  28. OTA · iOS 9.3+ · build 24.2
  29. OTA · iOS 9.2+ · build 23.1
  30. OTA · iOS 8.3+ · build 19.1
  31. OTA · iOS 8.0+ · build 17.1
  32. OTA · iOS 6.1+ · build 14.2
  33. OTA · iOS 3.1+ · build 5.6
  34. OTA · legacy · build 3.1
  35. OTA · iOS 13.4+ · build 41.1 · iPad
  36. OTA · iOS 13.3+ · build 40.1 · iPad
  37. OTA · iOS 11.1+ · build 30.1 · iPad
  38. OTA · iOS 8.1+ · build 18.1 · iPhone7,1
  39. OTA · iOS 6.1+ · build 14.1 · iPad
PhonesModemOverride file
iPhone 17, 17 Pro, 17 Pro MaxQualcomm X80 · Mav25overrides_V53_V54_V57.der.pri
iPhone 16eApple C1overrides_V59.der.pri
iPhone AirApple C1overrides_D23.der.pri
iPhone 17eApple C1overrides_V159.der.pri
iPhone 16, 16 Plus, 16 Pro, 16 Pro MaxQualcomm X75 · Mav24overrides_D93_D94_D47_D48.der.pri
iPhone 15, 15 Plus, 15 Pro, 15 Pro MaxQualcomm · Mav23overrides_D83_D84_D37_D38.der.pri
iPhone 14, 14 Plus, 14 Pro, 14 Pro MaxQualcomm · Mav22overrides_D73_D74_D27_D28.der.pri
iPhone SE (3rd generation)Qualcomm · Mav30overrides_D49.der.pri
iPhone 13, 13 mini, 13 Pro, 13 Pro MaxQualcomm · Mav21overrides_D63_D64_D16_D17.der.pri
iPhone 12, 12 mini, 12 Pro, 12 Pro MaxQualcomm · Mav20overrides_D52g_D53g_D53p_D54p.der.pri
iPhone 11, 11 Pro, 11 Pro MaxIntel · ICE19overrides_D421_D431_N104.der.pri
iPhone SE (2nd generation)Intel · ICE19overrides_D79.der.pri
Not named for a phoneoverrides_V63_V64s_V68.der.pri
Not named for a phoneoverrides_V64.der.pri
iPhone19,2, iPhone19,3, iPhone19,7Apple · c4020, Qualcomm X80 · Mav25Unknown: no copy of this bundle made for them
overrides_D52g_D53g_D53p_D54p.der.pri
Header
Written forQualcomm modem
PRI Revision2.3.211
Baseband overrides (62)
SettingValue
Carrier policylikely
PolicyMan rules keyed on MCC/PLMN: RAT capability, RF bands, UE mode
/policyman/carrier_policy.xml
3GPP data dynamic configlikely
Per-PLMN data rules, domestic/international roaming PLMN lists
/data/3gpp/data_3gpp_dynamic_config.xml
3GPP MTUlikely
Default PDN MTU in bytes
/nv/item_files/data/3gpp/ds_3gpp_mtu
1430
APN reject namelikely
APN whose rejection triggers carrier throttling
/nv/item_files/modem/data/3gpp/ps/apn_reject/apn_reject_name.txt
"reject_apn:ims; "
mav_pssi_reg_unblock_hplmn_max_reg_failurelikely
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuning
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
1
mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_stlikely
PSSI registration rule: Apple PLMN search / system-selection (PSSI) registration tuning
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
1
override_opl_pnn_lookup_for_non_rplmnunverified
SIM setting: UIM / SIM manager / SIM Toolkit
/nv/item_files/modem/uim/mmgsdi/override_opl_pnn_lookup_for_non_rplmn
2
SIM refresh retrylikely
SIM REFRESH retry parameters (4 x uint32)
/nv/item_files/modem/uim/mmgsdi/refresh_retry
slot_features_status_list__mav_overrideunverified
Apple override: Apple override of the Qualcomm item of the same name
/nv/item_files/modem/uim/mmgsdi/slot_features_status_list__mav_override
266
nv_pdown_uim_consecutive_techproblemsunverified
SIM setting: UIM / SIM manager / SIM Toolkit
/nv/item_files/modem/uim/uimdrv/nv_pdown_uim_consecutive_techproblems
769
IMS enable
Enables the IMS task (VoLTE, VoWiFi, SMS over IMS)
/nv/item_files/ims/IMS_enable
2
IMS media service configunverified
IMS media (codec/RTP) service config; no public schema
/nv/item_files/ims/media_service_config
SMS domain preference listunverified
Per-RAT/PLMN SMS domain list; layout not public
/nv/item_files/modem/mmode/sms_domain_pref_list
Block SMS-PP envelopelikely
Block SIM Toolkit SMS-PP (data download) envelopes, per subscription
/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
0 = Off
lte_conn_ctrl_barring_optimz_paramsunverified
LTE setting: LTE RRC / L1 / L2
/nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params
1
ISRlikely
Idle-mode Signalling Reduction (TS 23.401)
/nv/item_files/modem/nas/isr
1 = On
disable_4l_per_bandunverified
LTE setting: LTE RRC / L1 / L2
/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
LTE band preferencelikely
LTE band bitmap (bit n = band n+1)
/nv/item_files/modem/mmode/lte_bandpref
178120883634175 0xfffffeffffa10000
LTE band priority listlikely
Prioritised band list for LFS/FFS scans (uint16 array)
/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
LTE feature enablelikely
LTE RRC capability feature-enable bitmap; bit list unpublished
/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
LTE connection controlunverified
LTE connection control
/nv/item_files/modem/lte_connection_control
1
lte_rrc_sub_feature_enableunverified
LTE setting: LTE RRC / L1 / L2
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
"@"
lte_connection_ctrl_paramsunverified
LTE setting: LTE RRC / L1 / L2
/nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params
LTE feature disablelikely
LTE RRC capability feature-disable bitmap
/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
LTE disable durationlikely
How long LTE stays disabled when CS services are unavailable
/nv/item_files/modem/mmode/lte_disable_duration
0
lte_fgi_r8likely
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8
2100850942 0xfe70387d
lte_fgi_r10likely
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10
14142
lte_fgi_r9likely
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9
0
lte_fgi_r10_tddlikely
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd
14142
lte_fgi_r8_tddlikely
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd
2100850942 0xfe70387d
lte_fgi_r9_tddlikely
LTE Feature Group Indicators: 3GPP TS 36.331 Annex B featureGroupIndicators sent in UE-EUTRA-Capability
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9_tdd
0
lte_mac_enable_aasunverified
LTE setting: LTE RRC / L1 / L2
/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas
0
Fake eNodeB mitigationlikely
LTE false-base-station (fake eNodeB) mitigation
/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
1 = On
blacklist_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
LTE CA combos per PLMNlikely
Prune the advertised LTE CA combos per PLMN from /policyman/band_combos_per_plmn.xml
/nv/item_files/modem/mav/lte_ca_xml_generation
1 = On
whitelist_ca_combos_with_laalikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
LTE bands with UL CAlikely
LTE bands allowed in uplink carrier-aggregation combos
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca
B2 B5 B12 B14 B30 B48 B66
Reject LTE null cipheringlikely
Reject an LTE NAS Security Mode Command that selects null ciphering (EEA0)
/nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering
1 = On
Call before PS attachlikely
Allow data-call origination before PS attach
/nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach
0 = Off
SRVCC support
SRVCC capability indication from E-UTRAN to UTRAN (TS 23.216)
/nv/item_files/modem/nas/nas_srvcc_support
1 = On
Service request throttle behaviourlikely
Service-request throttling behaviour
/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior
1
srv_req_throt_config.txtunverified
Data services setting: Data services (PDN, throttling, AT commands)
/data/3gpp/throttling/srv_req_throt_config.txt
"FAILURE_TIMER_5:20; "
cdrx_opt_infounverified
LTE setting: LTE RRC / L1 / L2
/nv/item_files/modem/lte/ML1/cdrx_opt_info
257
Voice domain preference
E-UTRAN voice domain (TS 24.301 9.9.3.44)
/nv/item_files/modem/mmode/voice_domain_pref
3 = IMS PS voice preferred
WCDMA to LTE PS handoverlikely
WCDMA->LTE PS handover support
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support
0 = Off
endc_whitelist_ca_combos_with_laalikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_laa
EN-DC combos per PLMNlikely
Same per-PLMN capability pruning for EN-DC combos (next to cap_prune, skip_cap_prune)
/nv/item_files/modem/mav/endc_ca_file_generation
1 = On
endc_reduced_cc_lte_fr1_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos
517
endc_reduced_cc_fr2_ca_comboslikely
CA combo list: LTE CA / EN-DC band-combination allow/deny list
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr2_ca_combos
520
mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_caselikely
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case
0
mav_avoid_pco_for_agingunverified
Apple modem option: Apple-only (Maverick) modem option; undocumented
/nv/item_files/modem/mav/mav_avoid_pco_for_aging
1
mav_monitor_mm_mb_replace_nr5g_with_nr5guwblikely
5G icon rule: Status-bar 5G / 5G UW / 5G UC / 5G+ icon override logic
/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
1
mav_ignore_high_bw_checkunverified
Apple modem option: Apple-only (Maverick) modem option; undocumented
/nv/item_files/modem/mav/mav_ignore_high_bw_check
1
cap_csi_rs_32_port_controllikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
cap_disable_ul_256qamlikely
NR UE capability: NR RRC UE-capability toggle
/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam
257
sdm_nsa_icon_overridelikely
Smart data mode: Apple SDM: turns NR / SA off or deprioritises SA when it does not pay off
/nv/item_files/modem/mav/sdm_nsa_icon_override
0
3gpp_rel_versionlikely
3GPP release: Signalled 3GPP release
/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
5
CSG supportlikely
Closed Subscriber Group (femtocell) support
/nv/item_files/modem/nas/csg_support_configuration
1
ens_slot_enabledunverified
SIM setting: UIM / SIM manager / SIM Toolkit
/nv/item_files/modem/uim/mmgsdi/ens_slot_enabled
1
RPM paramslikely
Radio Policy Manager retry limits (10 bytes)
/nv/item_files/data/3gpp/rpm_params
RPM SIM listlikely
SIMs Radio Policy Manager applies to
/nv/item_files/data/3gpp/rpm_suppported_sim
Refresh vote OKlikely
Vote TRUE for SIM REFRESH
/nv/item_files/modem/sms/mmgsdi_refresh_vote_ok
0 = Off
Legacy NV values (3)
NVItemValue
62005PRI revision
Packed PRI Revision header
13828866 = 2.3.211 0x0203d300
3461ENS Enabledlikely
Enhanced Network Selection
1 = On
6850UMTS AMR Codec Preference Configlikely 5
Carrier Configuration Management feature groups

25 one-byte flags per group. No source names them; under each set flag is which carriers set it, across current bundles.

GroupFlags
Call Manager Feature Group
NV 62012, 2 of 25 set
0123456789101112131415161718192021222324
12: Set only on AT&T's network (AT&T, its brands and Dish), always with flag 3 of the unnamed group
20: Set for every iPhone from iPhone 14, and on older iPhones only by carriers that have shut down 3G; likely the newer form of flag 14
Feature Group (unnamed, tag 9f83e453)unverified
NV 62035, 1 of 25 set
0123456789101112131415161718192021222324
3: Set only on AT&T's network, always with Call Manager flag 12
Legacy NV item list (93)

Green ones have a value above.

259 Home SID/NID List176 IMSI MCC177 IMSI 11 1220 Primary CDMA Channel21 Secondary CDMA Channel5 Slot Cycle Index179 Voice Privacy285 EVRC Voice Service Options34 CDMA Mobile Terminated Home SID Registration Flag35 CDMA Mobile Terminated Foreign SID Registration Flag36 CDMA Mobile Terminated Foreign NID Registration Flag296 OTASP SPC Change304 OTKSL Flag261 SPASM Protection Per NAM260 OTAPA Enabled3533 SMS MO Retry Interval240 QNC Enabled Flag459 Data Services QC Mobile IP460 Data Services Mobile IP Registration Retries461 Data Services Mobile IP Registration Retries Initial Interval462 Data Services Mobile IP Registration Expiration Attempt Reregistration463 Data Services Mobile IP Number Profiles546 Data Services Mobile IP RFC2002bis MN Home Agent Authenticator Calculation495 Data Services Mobile IP Qualcomm PREV 6 MIP Handoff Optimization Enabled854 Data Services Mobile IP DMU PKO ID889 Data Services Mobile IP DMU MN Authentication906 IP PPP Password579 xEV(HDR) Access Network CHAP Authentication NAI1192 HDR Access Network Stream CHAP Authentication Password298 Packet Data Calls Originate String429 Data SCRM Enabled450 Data Throttle Enabled300 Packet Data Configuration241 Data Service Option Set401 GPSOne PDE TCP Address426 GPSOne PDE Port423 Primary DNS Server424 Secondary DNS Server714 Data Services Mobile IP Enable Profile4101 Roam Indicator Custom Home4960 HS Based Plus Dial Setting4959 User SID To MCC Assoc Table3635 SD Configurable Items62002 NV 62002466 Data Services Mobile IP Shared Secret User Profile4102 CDMA SO68 Enabled3446 TRM Configuration4396 DS Mobile IP Deregistration Retries553 GSM A5 Algorithms Supported4432 GPRS GEA Algorithms Supported4118 HSDPA Category4210 WCDMA HSUPA Category62009 CDMA 1X Feature Group62011 System Determination Feature Group62012 Call Manager Feature Group62013 Wireless Messaging Feature Group62014 Data Service Feature Group62015 UIM Service Feature Group62003442 Roaming Preference58021 NV 580211920 AAGPS Positioning Modes Supported4265 VOIP Registration Mode4229 SMS MP On Traffic Channel6248 eHRPD Enabled4528 HDR EMPA Supported6862 eHRPD Authentication Mode4964 HDR SCP Force AT Configuration475 HDR SCP Session Status7166 CDMA SO73 Enabled6 Mobile CAI Revision Number6850 UMTS AMR Codec Preference Config1907 Authentication Require Password Encryption62026 NV 620265895 MGRF Supported6247 PPP VSNCP Config Data852 APN Name5280 Disable CM Call Type946 Band preference bits 16-312954 Bits 32 To 63 Of Band Pref6832 HDRSCP Force Restricted CF3461 ENS Enabled62025 Delay RAU during CSFB (probable)6203162023 NV 620234703 CGPS UMTS PDE Server Address URL6792 GNSS SUPL Version3758 AAGPS Use Transport Security909 GSM/UMTS SMS Bearer Preference62005 PRI revision5800462035 Feature Group (unnamed, tag 9f83e453)855 RTRE Configuration
NV path schema index (248 paths, raw) 
/nv/item_files/modem/nas/lte_nas_temp_fplmn_backoff_time
/nv/item_files/ims/IMS_enable
/nv/item_files/modem/mmode/ue_usage_setting
/nv/item_files/cdma/1xcp/1xadvanced_capability
/nv/item_files/cdma/1xcp/so73_cop0_supported
/nv/item_files/modem/mmode/voice_domain_pref
/nv/item_files/modem/mmode/lte_disable_duration
/nv/item_files/modem/hdr/cp/ovhd/d2lresel
/nv/item_files/data/3gpp2/ehrpd_partial_context
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8
/nv/item_files/modem/data/epc/qmi_qos
/nv/item_files/wcdma/rrc/wcdma_rrc_fast_return_to_lte_after_csfb
/nv/item_files/modem/data/3gpp/lteps/auto_connect_def_pdn
/nv/item_files/modem/mmode/lte_bandpref
/nv/item_files/modem/lte/L2/mac/lte_mac_disable_dormancy
/nv/item_files/modem/mmode/sms_mandatory
/nv/item_files/modem/data/3gpp/umts_nw_initiated_qos_support
/nv/item_files/modem/nas/nas_lai_change_force_lau_for_emergency
/nv/item_files/data/3gpp2/mpit_enable
/nv/item_files/data/3gpp2/max_fb_pdn_failure_count
/nv/item_files/modem/data/3gpp/ps/3gpp_rel_version
/nv/item_files/modem/data/3gpp/ps/ser_req_throttle_behavior
/nv/item_files/modem/nas/hplmn_rat_order
/nv/item_files/modem/mmode/sms_only
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_csfb_control
/nv/item_files/modem/mmode/sms_domain_pref
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9
/nv/item_files/wcdma/rrc/wcdma_ppac_support
/nv/item_files/wcdma/rrc/wcdma_rrc_feature
/nv/item_files/data/3gpp2/ehrpd_to_hrpd_fallback
/nv/item_files/data/3gpp2/epc_data_context_duration
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_ps_ho_support
/nv/item_files/modem/data/3gpp/ps/allow_infinite_throt
/nv/item_files/modem/nas/cm_efs_mav_health_monitor_control_pri
/nv/item_files/modem/nas/nas_srvcc_support
/nv/item_files/data/3gpp2/tethered_nai_prefix
/nv/item_files/modem/sms/pri_disable_cb_dup_detection
/nv/item_files/modem/lte/rrc/lte_rrc_1xcsfb_enabled
/nv/item_files/modem/lte/ML1/cdrx_opt_info
/nv/item_files/modem/nas/ignore_uplmn
/nv/item_files/modem/lte/rrc/rohc_supported
/nv/item_files/wcdma/rrc/wcdma_rrc_csfb_skip_sib11_opt
/nv/item_files/modem/nas/csg_support_configuration
/nv/item_files/modem/nas/iPLMN
/nv/item_files/modem/nas/max_validate_sim_counter
/nv/item_files/modem/nas/forced_irat
/nv/item_files/modem/nas/irat_search_timer
/nv/item_files/modem/tdd_test_mode
/nv/item_files/modem/mmode/sms_domain_pref_list
/nv/item_files/modem/mmode/qmi/mav_pri_allow_auto_answer
/ds/atcop/atcop_cops_auto_mode.txt
/nv/item_files/modem/uim/mmgsdi/refresh_retry
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r8_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r9_tdd
/nv/item_files/modem/lte/rrc/efs/lte_fgi_r10_tdd
/nv/item_files/modem/lte_connection_control
/nv/item_files/modem/lte/rrc/cap/prune_ca_combos
/nv/item_files/modem/lte/rrc/efs/lte_conn_ctrl_barring_optimz_params
/nv/item_files/modem/data/3gpp/call_orig_allowed_before_ps_attach
/nv/item_files/wcdma/rrc/wcdma_rrc_wtol_tdd_ps_ho_support
/nv/item_files/modem/sms/mmgsdi_refresh_vote_ok
/nv/item_files/modem/nas/enable_international_cdma_roaming
/nv/item_files/modem/uim/gstk/default_apn
/nv/item_files/modem/mmode/buffer_ims_pref_change_timer
/nv/item_files/data/3gpp/rpm_params
/nv/item_files/data/3gpp/rpm_suppported_sim
/nv/item_files/modem/geran/grr/g2l_blind_redir_after_srvcc_control
/eHRPD/initial_sequence_number.txt
/nv/item_files/modem/data/epc/pdn_throttling_config.txt
/policyman/carrier_policy.xml
/mav/mav_police_pri_mode_pref_mask
/nv/item_files/modem/uim/mmgsdi/ens_slot_enabled
/nv/item_files/modem/nas/pri_fplmn
/nv/item_files/modem/nas/lte_nas_ignore_mt_csfb_during_volte_call
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling
/nv/item_files/modem/lte/L2/mac/lte_mac_enable_aas
/nv/item_files/modem/data/3gpp/lteps/null_apn_support_for_non_attach_pdn
/nv/item_files/modem/nas/mav_rat_upgrade_from_pri
/data/ds_dsd_apm_rules.txt
/nv/item_files/modem/data/3gpp/ps/rel_10_throttling_per_plmn
/nv/item_files/modem/nas/mav_hpplmn_scan_throttler/config_params
/nv/item_files/modem/data/3gpp/lteps/allow_def_lte_pdn_teardown
/nv/item_files/modem/nas/eplmn_cell_reselect
/nv/item_files/modem/nas/hplmn_rat_order_ctrl
/data/3gpp/throttling/srv_req_throt_config.txt
/nv/item_files/modem/lte/rrc/lte_deprio_supported
/nv/item_files/wcdma/rrc/rrc_fe_fach_support
/nv/item_files/modem/nas/nas_config_feature
/nv/item_files/modem/lte/rrc/efs/ho_neigh_cell_si_acq_params
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11
/nv/item_files/modem/lte/rrc/efs/lte_spec_feature_r11_tdd
/nv/item_files/modem/qmi/mav_fws_gsm_key_signature_bitmask
/nv/item_files/modem/mmode/lte_rpm_info_2
/nv/item_files/modem/nas/dos_mitigation_feature_config
/nv/item_files/modem/lte/rrc/efs/lte_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_feature_disable
/nv/item_files/modem/mmode/mode_pref
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_enable
/nv/item_files/modem/lte/rrc/efs/lte_rrc_sub_feature_disable
/nv/item_files/modem/lte/rrc/efs/cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/conn_rej_cell_depriority_params
/nv/item_files/modem/lte/rrc/efs/c2k_rx_config
/nv/item_files/modem/mmode/sd/avoid_gw_scan_timer
/nv/item_files/modem/mmode/follow_tot
/nv/item_files/modem/nr5g/RRC/cep_conn_est_fail_ctrl
/nv/item_files/modem/mmode/nr5g_disable_mode
/nv/item_files/modem/uim/mmgsdi/slot_features_status_list__mav_override
/nv/item_files/modem/uim/mmgsdi/override_opl_pnn_lookup_for_non_rplmn
/nv/item_files/modem/uim/uimdrv/nv_pdown_uim_consecutive_techproblems
/nv/item_files/modem/qmi/cat/qmi_cat_block_sms_pp_env_per_sub
/nv/item_files/modem/uim/uimdrv/mav_uim_null_byte_rx_for_power_down_config
/nv/item_files/modem/lte/rrc/cap/max_ca_combos
/nv/item_files/modem/mmode/nr_band_pref
/data/3gpp/data_3gpp_config.xml
/nv/item_files/modem/lte/rrc/mav_rrc_reject_supported
/nv/item_files/modem/nr5g/RRC/cap_add_bw
/nv/item_files/ims/media_service_config
/nv/item_files/modem/nas/mav_sa_lte_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_nr_prio_sub_band_per_plmn
/nv/item_files/modem/nas/mav_k_deep_sleep_rounds_chg_nr_bandscan2acqdb
/nv/item_files/modem/nas/mav_lte_steady_camp_duration
/nv/item_files/modem/nas/mav_interlace_scan_init_timer
/nv/item_files/modem/uim/gstk/feature_bmask__mav_override
/nv/item_files/modem/mmode/nr_nsa_band_pref
/nv/item_files/modem/lte/rrc/efs/csg_control_v2
/nv/item_files/modem/mav/disable_sdm
/nv/item_files/modem/mav/disable_sdm_sub_triggers
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_val
/nv/item_files/modem/lte/rrc/efs/disable_4l_per_band
/nv/item_files/modem/mav/lte_ca_xml_generation
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos
/nv/item_files/modem/lte/rrc/cap/blacklist_explicit_ca_combos
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_ulca
/nv/item_files/modem/lte/rrc/cap/whitelist_ca_combos_with_laa
/nv/item_files/modem/lte/rrc/cap/blacklist_ca_combos_with_nc_combos
/nv/item_files/modem/mav/endc_ca_file_generation
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_ulca
/nv/item_files/modem/nr5g/rrc/endc_whitelist_ca_combos_with_laa
/nv/item_files/modem/nr5g/rrc/endc_blacklist_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_blacklist_explicit_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr1_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_lte_fr2_ca_combos
/nv/item_files/modem/nr5g/rrc/endc_reduced_cc_fr2_ca_combos
/nv/item_files/modem/nas/tdscdma_op_plmn_list
/nv/item_files/modem/lte/rrc/cap/max_lte_cap_size
/nv/item_files/modem/lte/rrc/cap/max_nr_cap_size
/nv/item_files/modem/lte/rrc/cap/max_lte_nr_cap_size
/nv/item_files/modem/nr5g/RRC/cap_disable_ul_256qam
/nv/item_files/modem/data/3gpp/ps/ran_bit_rate_support
/nv/item_files/modem/nas/mav_nr_predef_narfcn
/nv/item_files/modem/nas/isr
/nv/item_files/modem/lte/L2/mac/lte_mac_configure_aas2_dc
/nv/item_files/modem/uim/gstk/feature_bmask_2__mav_override
/nv/item_files/modem/mmode/ssac_hvolte
/nv/item_files/modem/lte/rrc/efs/dsds_timers
/nv/item_files/modem/uim/uimdrv/mav_uim_wakeup_poll_timer_config
/nv/item_files/modem/lte/rrc/efs/band_priority_list_v2
/nv/item_files/modem/data/3gpp/ps/apn_reject/apn_reject_name.txt
/nv/item_files/modem/nr5g/rrc/endc_disable_specific_ul_bands
/nv/item_files/modem/lte/rrc/PC2_WHITELIST.xml
/nv/item_files/modem/lte/rrc/bbq/bbq_mitigation
/nv/item_files/modem/mmode/ims_reg_status_wait_timer
/nv/item_files/modem/lte/rrc/efs/lte_connection_ctrl_params
/nv/item_files/modem/mmode/scan_scope_rule
/nv/item_files/data/3gpp2/dscam_reduced_dormancy_timer
/nv/item_files/modem/data/dsmgr/pdu_session_id_inclusion
/nv/reg_files/modem/lte/rrc/csp/pref_freq_list
/nv/item_files/modem/mav/local_crp_hysteresis_tmr_val
/nv/item_files/modem/uim/gstk/mav_svc_notification_to_card_upon_restricted_mode_exit_latency_config
/nv/item_files/modem/nas/is_eps_rplmn_from_sim_needed
/nv/item_files/modem/nr5g/RRC/cre_thermal_ota_cause
/nv/item_files/modem/lte/rrc/efs/data_inactivity_control
/policyman/fullrat_timer
/nv/item_files/modem/mav/drop_endc_call_hysteresis_tmr_volte_val
/mav/sensor/uwb_coex/feature_flag
/nv/item_files/modem/lte/ML1/fr2_priority_optimization
/nv/item_files/modem/mav/volte_screen_on_hysteresis_tmr_val
/nv/item_files/modem/nas/skip_acb_check_drb_est_ims_registration
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state_no_uli_case
/Data_Profiles/Profile5
/eHRPD/SRLTE_reselection_timer_config.txt
/nv/item_files/modem/hdr/cp/almp/min_init_lte_meas_time
/nv/item_files/modem/hdr/srch/tclte/tbackoff
/nv/item_files/modem/nas/is_x_to_nr_enabled
/nv/item_files/modem/nr5g/RRC/meas_pruning
/nv/item_files/modem/mav/disable_mmw_for_ftv
/nv/item_files/modem/mav/disable_fr1_for_lpm
/nv/item_files/modem/data/3gpp/ps/set_volte_call_type
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_max_reg_failure
/nv/item_files/modem/nas/mav_pssi_reg_unblock_hplmn_voice_not_avail_based_on_motion_st
/nv/item_files/modem/mav/mav_monitor_enable_nr5g_uwb_based_on_motion_state
/nv/item_files/modem/nas/mav_pssi_reg_follow_rplmn_rat_order_power_up
/nv/item_files/modem/nr5g/RRC/cap_per_plmn_limit_bw
/policyman/5g_roaming_feature_enabled.xml
/policyman/5g_msim_feature_enabled.xml
/nv/item_files/modem/nas/lte_fast_cfl_search_timer
/nv/item_files/modem/nr5g/RRC/cap_csi_rs_32_port_control
/nv/item_files/modem/lte/rrc/efs/hst_scan_params
/nv/item_files/modem/data/3gpp/reset_non_spec_throttle_with_reattach_required
/nv/item_files/modem/nas/mav_lte_reject_smc_null_ciphering
/nv/item_files/modem/mav/mav_monitor_enable_5g_to_lte_dynamic_si
/nv/item_files/modem/mav/mav_monitor_5g_to_lte_dynamic_si_lte_bands_list
/nv/item_files/modem/mav/sa_depri_bw_val
/nv/item_files/modem/mav/override_icon_based_on_sa_coverage
/nv/item_files/modem/nr5g/RRC/cap_srs_tx_switch_control
/nv/item_files/modem/mav/mav_disable_sa_if_null_suci
/nv/item_files/modem/nas/mav_nr_reject_smc_null_ciphering
/nv/item_files/modem/mav/cap_prune_efs_version
/nv/item_files/modem/nr5g/RRC/cap_prune
/nv/item_files/modem/nas/t3411_value_during_mmtel_call
/nv/item_files/modem/lte/rrc/efs/extended_sibs
/nv/item_files/modem/uim/uimdrv/uim_check_sim_status_apm_off
/nv/item_files/data/3gpp/ds_3gpp_mtu
/nv/item_files/wcdma/rrc/rrc_req_lte_for_truncated_ca
/nv/item_files/modem/data/3gpp/ps/nr5g_ran_bit_rate_support
/nv/item_files/modem/mav/mav_monitor_replace_nr5g_uc_with_nr_basic
/nv/item_files/modem/data/3gpp/ps/uw_allow_abnormal_default
/nv/item_files/modem/mav/mav_monitor_mm_mb_replace_nr5g_with_nr5guwb
/nv/item_files/modem/nas/mt_detach_abnormal_handling
/nv/item_files/modem/mav/mav_avoid_pco_for_aging
/nv/item_files/modem/nas/emm_nas_nv_items
/nv/item_files/modem/mav/mav_ignore_n77_mm_coverage_exit_check
/nv/item_files/modem/mav/mav_ignore_high_bw_check
/nv/item_files/modem/mav/mav_ignore_cell_change_check
/nv/item_files/modem/nr5g/rrc/endc_blacklist_specific_lte_bands
/nv/item_files/modem/nas/ehplmn_nv_new
/nv/item_files/modem/nas/ehplmn_nv
/nv/item_files/modem/nas/is_ehplmn_nv_set
/nv/item_files/modem/mav/sdm_nsa_icon_override
/nv/item_files/modem/mav/cdm_feature_enable_status
/nv/item_files/modem/mmode/lte_bandpref_extn_65_256
/policyman/private_mcc_handling
/nv/item_files/modem/lte/rrc/efs/lte_3gpp_release_ver
/nv/item_files/modem/mav/prune_fr1_fr2_due_to_volte_enable
/nv/item_files/modem/mav/uwb_nr_band_bw
/nv/item_files/modem/lte/ML1/ard_config
/nv/item_files/modem/lte/ML1/traffic_forced_r1
/nv/item_files/modem/mav/disable_sa_icon_based_on_l2nr_mr
/nv/item_files/modem/mav/disable_sa_icon_based_on_idle_l2nr_meas
/nv/item_files/modem/nr5g/RRC/cap_feature_mac
/nv/item_files/modem/mav/mav_avoid_uwb_roaming
/nv/item_files/modem/mav/disable_sa_icon_based_on_restrict_dcnr
/nv/item_files/modem/lte/ML1/num_enb_tx_ant
/nv/item_files/modem/mmode/sd/mav_sd_emerg_call_allow_lmtd_srv
/data/3gpp/data_3gpp_dynamic_config.xml
Unidentified fields (1)
TagnlenValueNote
9fa710122b2002000210006010701d101090b8e03aa042500890bsmall binary blob that precedes the NV item list
Modem defaults

From the iOS 27.0.1 Qualcomm · Mav20 package, before this bundle's .der.pri.

Package files this bundle replaces

EFS pathSet byPackage copy
/policyman/carrier_policy.xmloverrides_D52g_D53g_D53p_D54p.der.pribbcfg.mbn P1P4P5P6P9P10 Compare
/policyman/carrier_policy.xmloverrides_V64.der.pribbcfg.mbn P1P4P5P6P9P10 Compare

2 more XML values set paths the package leaves unset.

782 carriers, 225 countries · iOS 27.0.1 (24A446) · beta iOS 27.2 beta 2 (24B5089g) GitHub Ready