CVE-2012-3738
Description
iOS before 6 allows physically proximate attackers to bypass Passcode Lock via Emergency Dialer to make FaceTime calls or read contact suggestions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
iOS before 6 allows physically proximate attackers to bypass Passcode Lock via Emergency Dialer to make FaceTime calls or read contact suggestions.
Vulnerability
The Emergency Dialer screen in the Passcode Lock implementation of Apple iOS before 6 does not properly restrict dialing methods. This allows Voice Dialing and contact suggestions to be accessed from the lock screen, bypassing intended access restrictions. Affected versions are iOS 5.x and earlier.
Exploitation
An attacker with physical proximity to a locked iOS device can access the Emergency Dialer screen. By using Voice Dialing, the attacker can initiate a FaceTime call without unlocking the device. Alternatively, by attempting to make a FaceTime call and reading the contact suggestions that appear, the attacker can obtain sensitive contact information. No authentication or user interaction beyond accessing the lock screen is required.
Impact
Successful exploitation allows an attacker to bypass the Passcode Lock, make unauthorized FaceTime calls, and disclose contact information stored on the device. This compromises the confidentiality of contacts and the integrity of the device's access controls.
Mitigation
Apple addressed this issue in iOS 6, released on September 19, 2012 [1]. Users should update to iOS 6 or later via iTunes. No workarounds are documented for devices that cannot be updated.
AI Insight generated on May 24, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
41cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*+ 39 more
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*range: <=5.1.1
- cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:5.1:*:*:*:*:*:*:*
- Range: <6
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- lists.apple.com/archives/security-announce/2012/Sep/msg00003.htmlnvdVendor Advisory
- support.apple.com/kb/HT5503nvdVendor Advisory
- osvdb.org/85620nvd
News mentions
0No linked articles in our index yet.