---
id: "CVE-2026-116260"
kind: "vulnerability"
aliases: ["CVE-2026-116260"]
title: "libimobiledevice: double free in AFC service lets remote attackers crash or run code"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["ios", "libimobiledevice", "linux", "package", "self-hosted"]
not_affected_if: ["no-libimobiledevice-installed", "no-network-exposed-service"]
published_at: "2026-10-26T12:17:06+00:00"
first_seen_at: "2026-10-26T12:29:53+00:00"
updated_at: "2026-10-26T12:31:40+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116260", "first_seen_at": "2026-10-26T12:29:53+00:00"}]
---

# libimobiledevice: double free in AFC service lets remote attackers crash or run code

A double free in the service_receive function of src/afc.c in libimobiledevice up to 1.4.0 corrupts memory when a crafted manipulation is performed. A remote attacker can trigger it, and a public exploit exists, so the realistic worst case is a crash or code execution in the process using the library.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed libimobiledevice version with `ideviceinfo -v` or the package manager, and look for anything at or below `1.4.0`
- Find programs that link the library (`ldd $(which idevicebackup2) | grep imobiledevice`) and check whether they expose AFC over a network service

## Fix

- Move libimobiledevice past `1.4.0` once a patched release is available; the sources do not name a fixed version
- Until then, stop exposing AFC-handling tools to untrusted or network-reachable devices and clients

## Timeline

- 2026-10-26T12:29:53+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116260

## From the sources

A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_