CVE-2013-0978: Apple iPhone OS

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code.

Affected products

• Apple iPhone OS: up to and including 6.1.2; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1.0 only; version 1.1.1 only; …
• Apple tvOS: up to and including 5.2.0; version 1.0.0 only; version 1.1.0 only; version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; …

Published 2013-03-20. Last modified 2026-06-16.