CVE-2012-0643: Apple iPhone OS

High severity, CVSS 9.3. EPSS: 4.9% chance of exploitation in the next 30 days.

The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program.

Affected products

• Apple iPhone OS: before 5.1 (fixed in 5.1)

Published 2012-03-08. Last modified 2026-06-16.