VULNERABILITY INTELLIGENCE
CVE-2013-0978
CVSS score2.1 NONE
EPSS probability0.35%
CISA KEVNot currently listed
Published2013-03-20
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code.
Weakness classification
- nvd@nist.gov: CWE-200
Primary references
- product-security@apple.com — Vendor Advisory
- product-security@apple.com — Vendor Advisory
- product-security@apple.com — Vendor Advisory
- product-security@apple.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory