Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 15

Export CSV
CVE-2026-116261

libimobiledevice AFC File afc.c afc_file_open out-of-bounds

A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afc_file_open of the file src/afc.c of the component AFC File Handler. The manipulation of the argument bytes leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Libimobiledevice
Products
Libimobiledevice
CVE-2026-116258

libimobiledevice AFC afc.c heap-based overflow

A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Libimobiledevice
Products
Libimobiledevice
CVE-2026-116260

libimobiledevice AFC Service afc.c service_receive double free

A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Libimobiledevice
Products
Libimobiledevice
CVE-2026-116262

libimobiledevice Web Inspector webinspector.c webinspector_receive_with_timeout heap-based overflow

A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspector_receive_with_timeout of the file src/webinspector.c of the component Web Inspector. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Libimobiledevice
Products
Libimobiledevice
CVE-2026-116259

libimobiledevice Device Info afc.c afc_get_device_info_key memory corruption

A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afc_get_device_info_key of the file src/afc.c of the component Device Info Handler. Performing a manipulation of the argument Value results in memory corruption. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Libimobiledevice
Products
Libimobiledevice
CVE-2025-66004

Local privilege escalation in usbmuxd from arbitrary local user to usbmux

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Libimobiledevice
Products
Libusbmuxd
CVE-2017-5836

libplist: Type inconsistency in bplist.c

The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.

CVSS 3.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Libimobiledevice
Products
Libplist
CVE-2017-5209

libplist: base64decode buffer over-read via split encoded Apple Property List data

The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.

CVSS 3.0 · 9.1 Critical EPSS 2.9% KEV · Not listed
Vendors
Libimobiledevice
Products
Libplist
CVE-2017-5545

libplist: Out-of-bounds heap buffer read in plistutil

The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.

CVSS 3.0 · 9.1 Critical EPSS 3.8% KEV · Not listed
Vendors
Libimobiledevice
Products
Libplist
CVE-2017-5834

libplist: Heap-buffer overflow in parse_dict_node

The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Libimobiledevice
Products
Libplist
CVE-2017-5835

libplist: Memory allocation error

libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Libimobiledevice
Products
Libplist
CVE-2017-7982

libplist: Integer overflow in the plist_from_bin function

Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Libimobiledevice
Products
Libplist
CVE-2016-5104

libimobiledevice: Sockets listening on INADDR_ANY

The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.

CVSS 3.0 · 5.3 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Libimobiledevice Opensuse
Products
Ubuntu Linux Libimobiledevice Libusbmuxd and 2 more
CVE-2013-2142

libimobiledevice: Insecure temporary file use when both $XDG_CONFIG_HOME and $HOME are unset

userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Libimobiledevice
Products
Libimobiledevice
CVE-2015-10082

UIKit0 libplist XML xplist.c plist_from_xml xml external entity reference

A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086cb139af7c82845f6d565e636073ff4b37440. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221499.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Libimobiledevice
Products
Libplist