Version RecordIndependent release archive
Menu

Release appearance

iOS 4.0.2 Public

Full article
Public release

Recorded context

About this appearance

iOS 4.0.2 was a focused security update that repaired a crafted-PDF font vulnerability and an IOSurface privilege-escalation path.

Date
Aug 11, 2010
Availability
available
Revision
No

Release notes

What changed

Original editorial synthesis. Linked references appear with the claims they support and in the source ledger.

Apple’s dedicated advisory identifies two corrections in iOS 4.0.2. One added bounds checking to FreeType’s handling of embedded CFF font instructions, where a malicious PDF could execute code.[1]

The second correction tightened IOSurface property validation to prevent code already running as the user from exploiting an integer overflow to gain system privileges. Apple’s 2010 index dates the release to August 11, 2010.[2][3]

Source ledger

References

Sources are linked to the claims they support. Publication and access dates are shown when available.

  2. Apple security updates (2010)

    Apple Support · 2026-07-30 · iOS 4.0.2 — 11 Aug 2010

    Back to text ↑
  4. About the security content of the iOS 4.0.2 Update for iPhone and iPod touch

    Apple Support · 2026-07-30 · iOS 4.0.2 security content

Release changes

Changed in this release

Features, fixes, removals, and regressions first observed in this release record.