CVE-2008-3612: Apple iPhone OS

Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days.

The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection.

Affected products

• Apple iPhone OS: from 2.0.0, up to and including 2.0.2

Published 2008-09-11. Last modified 2026-06-16.