CVE-2013-0964
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and...
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.
Exploit likelihood
What each source reports
NVD Score used
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.
- Record
CVE-2013-0964- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.
- Record
CVE-2013-0964- Updated
- 2026-11-02
EUVDEUVD-2013-0975 No score
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.
- Record
EUVD-2013-0975- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-599w-q86m-78mc No score
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and...
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.
- Record
GHSA-599w-q86m-78mc- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0964 is a low vulnerability (CVSS 3.6) in Apple Iphone Os, published January 29, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.63%, the 50th percentile. No source names a fixed version.
References
lists.apple.com/archives/security-announce/2013/Jan/msg00001.html
support.apple.com/kb/HT5642
osvdb.org/89659
securityfocus.com/bid/57595
nvd.nist.gov/vuln/detail/CVE-2013-0964
github.com/advisories/GHSA-599w-q86m-78mc