CVE-2010-1781: Apple iPhone OS

Medium severity, CVSS 6.8. EPSS: 4.3% chance of exploitation in the next 30 days.

Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the rendering of an inline element.

Affected products

• Apple iPhone OS: before 4.1 (fixed in 4.1)
• Canonical Ubuntu Linux: version 9.10 only; version 10.04 only; version 10.10 only

Published 2010-09-09. Last modified 2026-06-16.