{"id":"CVE-2026-116258","kind":"vulnerability","aliases":["CVE-2026-116258"],"related":[],"title":"libimobiledevice: heap buffer overflow in AFC lets remote attacker corrupt memory","description":"A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"libimobiledevice up to 1.4.0 has a heap-based buffer overflow in the AFC component of src/afc.c. A remote attacker can trigger it, and a public exploit exists, so memory corruption and possibly code execution are the risk.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ios","libimobiledevice","linux","macos","package"],"not_affected_if":[],"how_to_check":"- Check the installed libimobiledevice version with `ideviceinfo --version` or the package manager, and compare it against the affected range up to `1.4.0`.\n- Look for the AFC code in src/afc.c if building from source.","fix":null,"status":"open","published_at":"2026-10-26T11:16:37+00:00","first_seen_at":"2026-10-26T11:29:41+00:00","triaged_at":"2026-10-26T11:30:59+00:00","updated_at":"2026-10-26T11:30:59+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-26T11:30:59Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"libimobiledevice: heap buffer overflow in AFC lets remote attacker corrupt memory","impact":"high","summary":"libimobiledevice up to 1.4.0 has a heap-based buffer overflow in the AFC component of src/afc.c. A remote attacker can trigger it, and a public exploit exists, so memory corruption and possibly code execution are the risk.","category":"package","nicknames":[],"who_cares":["libimobiledevice","ios","macos","linux"],"confidence":0.5,"needs_auth":"unknown","worst_case":"attacker may corrupt heap memory and possibly run code","analyst_note":"Find whether a patched release exists after 1.4.0 and what triggers the AFC overflow; the vendor did not respond, so check the upstream repository and the NVD entry for fix status.","how_to_check":"- Check the installed libimobiledevice version with `ideviceinfo --version` or the package manager, and compare it against the affected range up to `1.4.0`.\n- Look for the AFC code in src/afc.c if building from source.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000557,"input_tokens":3324,"output_tokens":449,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116258':14A,17A '-2026':13A,16A '1.4.0':26B,69C 'afc':6A,36B,82C 'affect':71C 'attack':9A,42B,93C 'avail':102C 'base':31B,89C 'buffer':3A,32B,90C 'code':56B 'compon':37B,81C 'contact':110C 'corrupt':10A,53B 'cve':12A,15A 'disclosur':114C 'earli':111C 'execut':57B,96C 'exist':50B 'exploit':49B,99C 'file':77C 'heap':2A,30B,88C 'heap-bas':29B,87C 'identifi':64C 'io':18B 'lead':85C 'let':7A 'libimobiledevic':1A,19B,23B,66C 'linux':20B 'maco':21B 'manipul':84C 'memori':11A,52B 'might':104C 'overflow':4A,33B,91C 'packag':22B 'part':74C 'possibl':55B 'public':48B,101C 'remot':8A,41B,97C 'respond':118C 'risk':60B 'src/afc.c':39B,78C 'trigger':44B 'unknown':73C 'use':106C 'vendor':108C 'vulner':62C 'way':121C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T11:16:37+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116258","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116258","severity":null,"published_at":"2026-10-26T11:16:37+00:00","modified_at":"2026-10-26T11:16:37+00:00","first_seen_at":"2026-10-26T11:29:41+00:00","fetched_at":"2026-10-26T11:29:41+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}