Live › vulnerability › CVE-2026-116258
Go to dashboardlibimobiledevice up to 1.4.0 has a heap-based buffer overflow in the AFC component of src/afc.c. A remote attacker can trigger it, and a public exploit exists, so memory corruption and possibly code execution are the risk.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 11:29 UTC. All times on this page are UTC.
No product ranges from the sources yet.
ideviceinfo --version or the package manager, and compare it against the affected range up to 1.4.0.Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116258")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.