CVE-2013-3950: Apple iPhone OS

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for attackers to conduct untethering attacks via a long string in the DYLD_SHARED_CACHE_DIR environment variable.

Affected products

• Apple iPhone OS: version 5.1 only; version 5.1.1 only; version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.1 only; …

Published 2013-06-05. Last modified 2026-06-16.