CVE-2011-3442: Apple iPhone OS

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.

Affected products

• Apple iPhone OS: version 4.3.0 only; version 4.3.1 only; version 4.3.2 only; version 4.3.3 only; version 4.3.4 only; version 4.3.5 only; …

Published 2011-11-11. Last modified 2026-06-16.