VULNERABILITY INTELLIGENCE

CVE-2013-5156

CVSS score4.3 MEDIUM

EPSS probability1.36%

CISA KEVNot currently listed

Published2013-09-19

Last modified2026-06-16

Description

The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon.