Description
The IOUSBDeviceFamily driver in the USB implementation in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 accesses pipe object pointers that originated in userspace, which allows local users to gain privileges via crafted code.
References (4)
Core 4
Core References
Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2013/Mar/msg00005.html
Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5702
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5704
Scores
EPSS
0.0036
EPSS Percentile
28.8%
Details
Status
published
Products (30)
apple/iphone_os
1.0.0
apple/iphone_os
1.0.1
apple/iphone_os
1.0.2
apple/iphone_os
1.1.0 (2 CPE variants)
apple/iphone_os
1.1.1
apple/iphone_os
1.1.2 (2 CPE variants)
apple/iphone_os
1.1.3 (2 CPE variants)
apple/iphone_os
1.1.4 (2 CPE variants)
apple/iphone_os
1.1.5 (2 CPE variants)
apple/iphone_os
2.0
... and 20 more
Published
Mar 20, 2013
Tracked Since
Feb 18, 2026