AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-6282

HIGH · CVSS 8.8 EPSS 39.71% CISA KEV · Actively Exploited Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-11-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
External Security References

Note: these links are listed for security research and verification purposes only.

CISA KEV Details

Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.

Ransomware use: Unknown

Added to KEV: 2022-09-15

Required action: Apply updates per vendor instructions.

CVE
CVE-2013-6282
Severity
HIGH
CVSS
8.8
EPSS
39.71%
Linux Android

Original NVD Description

The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.