CVE-2026-116262Medium· 5.4▾ SunlitA vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspector_receive_with_timeout of the file src/webinspector.c of the component Web Inspector. The manipulation results in heap-based bu…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspector_receive_with_timeout of the file src/webinspector.c of the component Web Inspector. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
libimobiledevice 1.0libimobiledevice 1.1libimobiledevice 1.2libimobiledevice 1.3libimobiledevice 1.4.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116258Medium· 6.3libimobiledevice AFC afc.c heap-based overflow
CVE-2026-116260High· 7.3libimobiledevice AFC Service afc.c service_receive double free
CVE-2026-116261Low· 3.5libimobiledevice AFC File afc.c afc_file_open out-of-bounds
CVE-2026-116259Medium· 5.3libimobiledevice Device Info afc.c afc_get_device_info_key memory corruption
CVE-2023-7104Medium· 5.5A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical
CVE-2025-11083Medium· 5.3A vulnerability has been found in GNU Binutils 2.45