Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2017-8248: Apple iPhone OS could execute code from malformed network message
CVE-2017-8248 · published 9 years ago
Summary
iPhone OS on iPhone 5 and newer, iPad 4th generation and newer, and iPod touch 6th generation may allow a specially crafted network message to cause the device to run unwanted code. This could let an attacker take control of the device or disrupt its operation. Apply the latest operating system updates from Apple as soon as they are available to fix the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | iphone_os |
<= 10.3.2 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
Original advisory text
A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation.
A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation.
References
- http://seclists.org/fulldisclosure/2017/Jul/34 Mailing List Third Party Advisory
- http://www.securityfocus.com/bid/106128
- http://www.securityfocus.com/bid/99891 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1038950 Third Party Advisory VDB Entry
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-119Buffer Overflow
Timeline
Published16 Aug 2017
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-8248 · NVD
Track software like this
Free during beta