CVE-2008-4231: Apple iPhone OS

High severity, CVSS 9.3. EPSS: 5.9% chance of exploitation in the next 30 days.

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

Affected products

• Apple iPhone OS: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1 only; version 1.1.1 only; version 1.1.2 only; …
• Apple Safari: any version

Published 2008-11-25. Last modified 2026-06-16.