[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fN-S2snTnT18gJ_a1UPJuKv9UFxMqpPSAhLlLfLt0yYE":3,"g5a-ex:apple\u002Fipod_touch@*":124,"g5a-family:apple\u002Fipod_touch":126},{"success":4,"data":5},true,{"product":6,"versions":36,"topVulnerabilitiesByEpss":45,"kevVulnerabilities":101,"seoMetadata":102,"meta":121},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":35},"apple","ipod_touch",8,58,0,"2012-08-07",[14,17,20,22,25,27,30,33],{"version":15,"cve_count":9,"kev_count":11,"has_kev":16},"1.1",false,{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},"1.1.1",9,{"version":21,"cve_count":9,"kev_count":11,"has_kev":16},"1.1.2",{"version":23,"cve_count":24,"kev_count":11,"has_kev":16},"1.1.3",6,{"version":26,"cve_count":24,"kev_count":11,"has_kev":16},"1.1.4",{"version":28,"cve_count":29,"kev_count":11,"has_kev":16},"2.0",3,{"version":31,"cve_count":32,"kev_count":11,"has_kev":16},"2.0.1",2,{"version":34,"cve_count":32,"kev_count":11,"has_kev":16},"2.0.2","Ipod Touch by Apple is a technology product with 8 tracked versions and 58 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[37,38,39,40,41,42,43,44],{"version":15,"cve_count":9,"kev_count":11,"has_kev":16},{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},{"version":21,"cve_count":9,"kev_count":11,"has_kev":16},{"version":23,"cve_count":24,"kev_count":11,"has_kev":16},{"version":26,"cve_count":24,"kev_count":11,"has_kev":16},{"version":28,"cve_count":29,"kev_count":11,"has_kev":16},{"version":31,"cve_count":32,"kev_count":11,"has_kev":16},{"version":34,"cve_count":32,"kev_count":11,"has_kev":16},[46,54,61,67,71,75,81,86,92,96],{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":16,"epssScore":53},"CVE-2008-2303","Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript array indices that trigger an out-of-bounds access, a different vulnerability than CVE-2008-2307.","2008-07-14",10,"v2","Critical",0.12988,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":51,"severity":59,"isKev":16,"epssScore":60},"CVE-2010-1813","WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving HTML object outlines.","2010-09-09",6.8,"Medium",0.09691,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":51,"severity":52,"isKev":16,"epssScore":66},"CVE-2009-1698","WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.","2009-06-10",9.3,0.08462,{"cveId":68,"description":69,"publishedDate":64,"cvssScore":65,"cvssVersion":51,"severity":52,"isKev":16,"epssScore":70},"CVE-2009-1701","Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.",0.07746,{"cveId":72,"description":73,"publishedDate":49,"cvssScore":65,"cvssVersion":51,"severity":52,"isKev":16,"epssScore":74},"CVE-2008-2317","WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via a reference to the ownerNode property of a copied CSSStyleSheet object of a STYLE element, as originally demonstrated on Apple iPhone before 2.0 and iPod touch before 2.0, a different vulnerability than CVE-2008-1590.",0.07704,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":51,"severity":59,"isKev":16,"epssScore":80},"CVE-2008-3950","Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read.","2008-09-16",5,0.07084,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":79,"cvssVersion":51,"severity":59,"isKev":16,"epssScore":85},"CVE-2009-0961","The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger an alert.","2009-06-19",0.06384,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":51,"severity":59,"isKev":16,"epssScore":91},"CVE-2009-1724","Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.","2009-07-09",4.3,0.06212,{"cveId":93,"description":94,"publishedDate":89,"cvssScore":65,"cvssVersion":51,"severity":52,"isKev":16,"epssScore":95},"CVE-2009-1725","WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.",0.06192,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":58,"cvssVersion":51,"severity":59,"isKev":16,"epssScore":100},"CVE-2011-1344","Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.","2011-03-10",0.06128,[],{"title":103,"metaDescription":104,"keywords":105,"structuredData":106},"Ipod Touch by Apple - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Ipod Touch by Apple covering 8 versions with 58 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ipod Touch vulnerabilities, Ipod Touch security, Ipod Touch CVE, Apple Ipod Touch, Ipod Touch threat intelligence, Apple security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":107,"@type":108,"name":109,"description":104,"url":110,"manufacturer":111,"applicationCategory":115,"softwareVersion":116,"mainEntity":117},"https:\u002F\u002Fschema.org","SoftwareApplication","Ipod Touch","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapple\u002Fipod_touch",{"@type":112,"name":113,"url":114},"Organization","Apple","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fapple","Security Software","8 versions tracked",{"@type":118,"name":119,"description":120,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Ipod Touch Security Vulnerabilities","Security vulnerabilities affecting Ipod Touch by Apple",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":122,"apiVersion":123},"2026-10-28T15:56:24.740Z","3.0",{"rows":125,"total":11,"capped":16,"failed":11},[],[]]