CVE-2011-3439: Apple iPhone OS

High severity, CVSS 9.3. EPSS: 5.3% chance of exploitation in the next 30 days.

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.

Affected products

• Apple iPhone OS: before 5.0.1 (fixed in 5.0.1)
• Suse Linux Enterprise Desktop: version 11 only
• Suse Linux Enterprise Server: version 11 only
• Suse Linux Enterprise Software Development Kit: version 11 only

Published 2011-11-11. Last modified 2026-06-16.