CVE-2010-3116: Apple iPhone OS

High severity, CVSS 10.0. EPSS: 3.7% chance of exploitation in the next 30 days.

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.

Affected products

• Apple iPhone OS: before 4.2 (fixed in 4.2)
• Apple Safari: before 4.1.3 (fixed in 4.1.3); from 5.0, before 5.0.3 (fixed in 5.0.3)
• Canonical Ubuntu Linux: version 9.10 only; version 10.04 only; version 10.10 only
• Google Chrome: before 5.0.375.127 (fixed in 5.0.375.127)
• WebKitGTK WebKitGTK: before 1.2.6 (fixed in 1.2.6)

Published 2010-08-24. Last modified 2026-06-16.