CVE-2017-8248: Apple iPhone OS

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation.

Affected products

• Apple iPhone OS: up to and including 10.3.2

Published 2017-08-16. Last modified 2026-06-17.