Buffer overflow in Apple Ipad
CVE-2010-3832
Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity (TMSI) field.
Vulnerability class: Buffer Overflow
EPSS: 0.037 (88.6th percentile) — read the EPSS interpretation.
Affected products
- Apple Ipad
- Apple Iphone_os — versions 2.1.1, 2.0.2, 1.1.5
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (vdb-entry, x_refsource_XF)
- product-security@apple.com (vdb-entry, x_refsource_VUPEN)
- product-security@apple.com (vdb-entry, x_refsource_SECTRACK)
- product-security@apple.com (x_refsource_SECUNIA, third-party-advisory)
- product-security@apple.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)