CVE-2012-0641: CFNetwork in Apple iOS before 5.1 does not properly construct request headers during parsing of URLs, which...

Security readout for executives and security teams

This is an old Apple iOS information-disclosure issue. Before iOS 5.1, CFNetwork could build request headers incorrectly while parsing malformed URLs, allowing a remote attacker to obtain sensitive information. The source bundle does not provide CVSS, CWE, or detailed affected-version metadata beyond iOS before 5.1. Exposure is most likely limited to legacy Apple iOS devices running versions earlier than 5.1. Modern managed fleets are unlikely to be exposed unless they retain obsolete devices, lab images, or unsupported embedded/mobile deployments using old iOS builds. Treat this as a legacy exposure issue, not a current emergency based on available evidence. Prioritize confirmation that no pre-5.1 iOS devices remain in business use, especially where they handle sensitive data or connect to corporate networks. Mitigation focus: Inventory managed and unmanaged iOS devices for versions earlier than 5.1.; Follow Apple advisory APPLE-SA-2012-03-07-2 for vendor remediation guidance.; Upgrade affected devices to iOS 5.1 or later where supported..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.