What’s Vulnerable › Vulnerabilities

CVE-2013-3952

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-06-05 · updated 2026-06-16
• Weakness: CWE-264

Description

The fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROC_PIDFDPIPEINFO option to the proc_info system call for a kernel pipe handle.

Affected products

• macOS: 10.8.0, 10.8.1, 10.8.2, 10.8.3, 10.8.4

References

• http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
• http://www.syscan.org/index.php/sg/program/day/2
• http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
• http://www.syscan.org/index.php/sg/program/day/2

Get alerted when CVE-2013-3952 or the next vulnerability affects your stack