UBUNTU-CVE-2026-116258: Buffer Overflow
A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require authentication or local access?
The vulnerability is remotely exploitable, but the attacker needs low-level privileges before exploitation. No user interaction is required.
Which libimobiledevice versions should be treated as potentially affected?
The issue is reported to affect libimobiledevice versions up to and including 1.4.0. The provided information does not identify a fixed version.
Is exploit code available?
Yes. A public exploit is reported to be available, which may increase the likelihood of attempted exploitation where an attacker can obtain the required privileges.