CVE-2009-1683: Apple iPhone OS

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted ICMP echo request, which triggers an assertion error related to a "logic issue."

Affected products

• Apple iPhone OS: version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1.0 only; version 1.1.1 only; version 1.1.2 only; …
• Apple Ipod Touch

Published 2009-06-19. Last modified 2026-06-16.