VULNERABILITY INTELLIGENCE

CVE-2008-4229

CVSS score3.7 LOW
EPSS probability0.24%
CISA KEVNot currently listed
Published2008-11-25
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:P/I:P/A:P

Description

Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references