CVE-2018-4148: Apple iPhone OS

Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days.

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. A buffer overflow allows remote attackers to execute arbitrary code.

Affected products

• Apple iPhone OS: before 11.3 (fixed in 11.3)

Published 2018-04-03. Last modified 2026-06-17.