CVE-2010-4012: Apple iPhone OS

Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button.

Affected products

• Apple iPhone OS: version 4.0 only; version 4.1 only

Published 2010-12-08. Last modified 2026-06-16.