CVE-2008-4229: Apple iPhone OS

Low severity, CVSS 3.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup.

Affected products

• Apple iPhone OS: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1 only; version 1.1.1 only; version 1.1.2 only; …

Published 2008-11-25. Last modified 2026-06-16.