VULNERABILITY INTELLIGENCE

CVE-2013-5164

CVSS score3.3 LOW
EPSS probability0.23%
CISA KEVNot currently listed
Published2013-10-24
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:N

Description

Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Contacts entries, by visiting the Contacts pane.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references