CVE-2008-4228: Apple iPhone OS

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physically proximate attackers to leverage the emergency-call ability of locked devices to make a phone call to an arbitrary number.

Affected products

• Apple iPhone OS: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1 only; version 1.1.1 only; version 1.1.2 only; …

Published 2008-11-25. Last modified 2026-06-16.