CVE-2017-2368: An issue was discovered in certain Apple products.

Security readout for executives and security teams

CVE-2017-2368 is an Apple iOS Contacts denial-of-service issue. A maliciously crafted contact card could crash the affected application on iOS versions before 10.2.1. The sources do not indicate data theft, code execution, or confirmed exploitation in the wild. Exposure is mainly legacy Apple iOS devices still running versions before 10.2.1 and able to receive or open contact cards. Current managed fleets should have minimal exposure if iOS patch compliance is enforced. Low for normally patched environments. Raise priority only if business-critical or unmanaged devices still run iOS before 10.2.1, because the known impact is app disruption rather than system compromise. Mitigation focus: Update affected iOS devices to 10.2.1 or later.; Prefer current supported iOS versions where hardware allows.; Use MDM to block or quarantine unsupported iOS versions..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.