Vulnerability in Apple Iphone OS

CVE-2010-0038

Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption.

EPSS: 0.004 (29.0th percentile) — read the EPSS interpretation.

Affected products

Apple Iphone_os — versions 1.0.1, 3.1.2, 1.1.4
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
product-security@apple.com (x_refsource_OSVDB, vdb-entry)
product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@apple.com (vdb-entry, x_refsource_BID)