What’s Vulnerable › Vulnerabilities

CVE-2011-3442

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-11-11 · updated 2026-06-16
• Weakness: CWE-399

Description

The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.

Affected products

• Apple Iphone Os: 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5 (+1)

References

• http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html
• http://support.apple.com/kb/HT5052
• http://www.securitytracker.com/id?1026287
• http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html
• http://support.apple.com/kb/HT5052
• http://www.securitytracker.com/id?1026287

Get alerted when CVE-2011-3442 or the next vulnerability affects your stack