What’s Vulnerable › Vulnerabilities

CVE-2013-3950

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-06-05 · updated 2026-06-16
• Weakness: CWE-119

Description

Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for attackers to conduct untethering attacks via a long string in the DYLD_SHARED_CACHE_DIR environment variable.

Affected products

• Apple Iphone Os: 5.1, 5.1.1, 6.0, 6.0.1, 6.0.2, 6.1 (+2)

References

• http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
• http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
• http://support.apple.com/kb/HT5934
• http://www.securitytracker.com/id/1029054
• http://www.syscan.org/index.php/sg/program/day/2
• http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
• http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
• http://support.apple.com/kb/HT5934
• http://www.securitytracker.com/id/1029054
• http://www.syscan.org/index.php/sg/program/day/2

Get alerted when CVE-2013-3950 or the next vulnerability affects your stack