CVE-2008-2303: Apple Safari

High severity, CVSS 10.0. EPSS: 13% chance of exploitation in the next 30 days.

Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307.

Affected products

• Apple Safari: any version

Published 2008-07-14. Last modified 2026-06-16.