CVE-2026-116258Medium· 6.3▾ SunlitA vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The expl…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
libimobiledevice 1.0libimobiledevice 1.1libimobiledevice 1.2libimobiledevice 1.3libimobiledevice 1.4.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116262Medium· 5.4libimobiledevice Web Inspector webinspector.c webinspector_receive_with_timeout heap-based overflow
CVE-2026-116260High· 7.3libimobiledevice AFC Service afc.c service_receive double free
CVE-2026-116261Low· 3.5libimobiledevice AFC File afc.c afc_file_open out-of-bounds
CVE-2026-116259Medium· 5.3libimobiledevice Device Info afc.c afc_get_device_info_key memory corruption
CVE-2023-7104Medium· 5.5A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical
CVE-2025-11083Medium· 5.3A vulnerability has been found in GNU Binutils 2.45