CVE-2010-0038: Apple iPhone OS

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption.

Affected products

• Apple iPhone OS: version 1.0 only; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1 only; version 1.1.0 only; …

Published 2010-02-03. Last modified 2026-06-16.