Release record
Release notes
Editorial synthesis with inline references and a source ledger when citations are available.
Two CoreGraphics corrections addressed FreeType handling of TrueType and Type 1 fonts inside malicious PDF files. Apple documented application termination or arbitrary code execution as possible outcomes.[1]
Source ledger
Sources are linked to the claims they support. Publication and access dates are shown when available.
Apple Support · 2026-07-30 · CoreGraphics — CVE-2010-3855 and CVE-2011-0226
Apple Support · 2026-07-30 · IOMobileFrameBuffer — CVE-2011-0227
Apple Support · Apple · 2023-08-10T00:00:00.000Z · iOS 4.3.4 — 15 July 2011
Apple Support · 2026-07-30 · iOS 4.3.4 security content
Documented & observed
Source-linked features, fixes, known issues, removals, and community-observed behavior recorded across this version’s appearances and verified builds.
Release changes
Features, fixes, removals, and regressions first observed in this release record.
security · fixed
The defect could allow malicious code already running as the user to gain system privileges.
Recorded at Public
security · fixed
Apple documented unexpected termination or arbitrary code execution from a malicious PDF.
Recorded at Public
security · fixed
Opening a malicious PDF could otherwise terminate an application or execute arbitrary code.
Recorded at Public
Milestones
Every recorded channel appearance in chronological order. Open an appearance for any available build, scope, notes, and sources.
Public release
iOS 4.3.4 closed two crafted-PDF font vulnerabilities and a framebuffer privilege-escalation path.
Historical context
Pace, intervals, and duration compared with earlier releases on the same platform.