CVE-2011-3439: apple iphone_os Out-of-bounds Write

CVSS: 9.3v2.0HighModified

AliasesRHSA-2011:1455DEBIAN-CVE-2011-3439DSA-2350-1

Published 11-11-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-3439 is a high (CVSS 9.3) Out-of-bounds Write vulnerability in apple iphone_os. EPSS estimates a 5.33% chance of exploitation in the next 30 days, higher than 92.5% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

5.33%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1

OPENSUSE-SU-2024:10438-1 RHSA-2012:0094

Timeline

11-11-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

5.33%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.33% on 22-09-2026

22-09-202622-10-2026

EPSS score

5.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.

Affected systems

Redhat5 products

freetype< 0:2.1.9-21.el4 | < 0:2.2.1-28.el5_7.2 | < 0:2.3.11-6.el6_1.8
freetype-debuginfo< 0:2.1.9-21.el4 | < 0:2.2.1-28.el5_7.2 | < 0:2.3.11-6.el6_1.8
freetype-demos< 0:2.1.9-21.el4 | < 0:2.2.1-28.el5_7.2 | < 0:2.3.11-6.el6_1.8
freetype-devel< 0:2.1.9-21.el4 | < 0:2.2.1-28.el5_7.2 | < 0:2.3.11-6.el6_1.8
freetype-utils< 0:2.1.9-21.el4

Suse3 products