CVE-2010-3832: Apple iPhone OS

Medium severity, CVSS 6.8. EPSS: 3.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity (TMSI) field.

Affected products

• Apple iPhone OS: up to and including 4.1; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1.0 only; version 1.1.1 only; …

Published 2010-11-26. Last modified 2026-06-16.