CVE-2008-3876: Apple iPhone

Low severity, CVSS 1.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restrictions, and obtain sensitive information or make arbitrary use of the device, via an Emergency Call tap and a Home double-tap, followed by a tap of any contact's blue arrow.

Affected products

• Apple iPhone: version 2.0.2 only

Published 2008-09-02. Last modified 2026-06-16.