Read the docs
TI-2017-01656 Aliases CVE-2017-2375GHSA-76h4-9p9h-whpw

An issue existed in preventing the uploading of CallKit call history to iCloud.

Priority LOW 15Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An issue existed in preventing the uploading of CallKit call history to iCloud. This issue was addressed through improved logic. This issue is fixed in iOS 10.2.1. Updates for CallKit call history are sent to iCloud.

Why it matters now

EPSS 0.00222 12th percentileScored 2026-11-07
Fix Fixed iOS (Apple): 10.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
AppleiOSbefore 10.210.2Patch availableCNA
  • iOS VendorApple Affected before 10.2 Fixed in 10.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*before 10.2.1VulnerableApple
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* Versions before 10.2.1 Vulnerable ·Apple

Remediation

  • Fix · CNA iOS (Apple) Fixed in 10.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-2375
  2. 2026-10-03 Alias added: GHSA-76h4-9p9h-whpw

References

Advisory 1

  • TI-2025-28008 Out-of-bounds write in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 10.0
  • TI-2025-22441 Apple iOS and iPadOS: An attacker with arbitrary read and write capability may be able to… KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-22440 Memory corruption in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-17951 Out-of-bounds write in Apple Safari KEVCVSS 3.1CRITICAL 10.0
  • TI-2025-17847 Use after free in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 10.0
  • TI-2022-06854 Out-of-bounds write in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 9.8
See all 4500 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences