RLSA-2026:98105 Important: libimobiledevice security update

libimobiledevice is a library for connecting to mobile devices including phones and music players Security Fixes: libimobiledevice: libimobiledevice: Denial of Service via double free in servicereceive CVE-2026-116260 For more details about the security issues, including the impact, a CVSS score,...

libimobiledevice security update

An update is available for libimobiledevice. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libimobiledevice is a library for connecting to mobile devices...

Important: libimobiledevice

Issue Overview: A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used...

RockyLinux 8 : libimobiledevice (RLSA-2026:98105)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:98105 advisory. libimobiledevice: libimobiledevice: Denial of Service via double free in servicereceive CVE-2026-116260 Tenable has extracted the preceding description block...

Important: Red Hat Security Advisory: libimobiledevice security update

An update for libimobiledevice is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive

A flaw was found in libimobiledevice. A remote attacker could exploit a double-free vulnerability to cause a Denial of Service DoS or potentially achieve arbitrary code execution. By sending manipulated input to the servicereceive function in the Apple File Conduit AFC service, an attacker can...

ALSA-2026:98105 Important: libimobiledevice security update

libimobiledevice is a library for connecting to mobile devices including phones and music players Security Fixes: libimobiledevice: libimobiledevice: Denial of Service via double free in servicereceive CVE-2026-116260 For more details about the security issues, including the impact, a CVSS score,...

Important: libimobiledevice security update

libimobiledevice is a library for connecting to mobile devices including phones and music players Security Fixes: libimobiledevice: libimobiledevice: Denial of Service via double free in servicereceive CVE-2026-116260 For more details about the security issues, including the impact, a CVSS score,...

libimobiledevice security update

1.2.0-18 - Fix double free in afcreceivedata when servicereceive fails 1.2.0-17 - CVE-2026-116260 libimobiledevice: libimobiledevice: Denial of Service via double free in servicereceive double free in servicereceive...

Oracle Linux 8 : libimobiledevice (ELSA-2026-98105)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-98105 advisory. 1.2.0-18 - Fix double free in afcreceivedata when servicereceive fails 1.2.0-17 - CVE-2026-116260 libimobiledevice: libimobiledevice: Denial of Service via...

RHEL 8 : libimobiledevice (RHSA-2026:98105)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98105 advisory. libimobiledevice is a library for connecting to mobile devices including phones and music players Security Fixes: libimobiledevice: libimobiledevice...

CVE-2026-116261

A flaw was found in libimobiledevice. This out-of-bounds read vulnerability allows a remote attacker to cause unauthorized information disclosure. By supplying manipulated input parameters to the Apple File Conduit AFC file opening routine, an attacker can cause the application to read memory pas...

CVE-2026-116259

A flaw was found in libimobiledevice. A local attacker can trigger this vulnerability by supplying a manipulated value argument to the afcgetdeviceinfokey function in the device information handler. This issue leads to memory corruption, which can result in application crashes or a Denial of...

CVE-2026-116258

A flaw was found in libimobiledevice. A remote attacker can trigger a heap-based buffer overflow in the Apple File Conduit AFC component by sending specially crafted requests. Successful exploitation may result in a Denial of Service DoS through an application crash or memory corruption. Mitigati...

Linux Distros Unpatched Vulnerability : CVE-2026-116259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afcgetdeviceinfokey of the file src/afc.c of the...

Linux Distros Unpatched Vulnerability : CVE-2026-116261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afcfileopen of the file src/afc.c of the component AFC File...

Linux Distros Unpatched Vulnerability : CVE-2026-116258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads...

SUSE CVE-2026-116258

A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was...

SUSE CVE-2026-116259

A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afcgetdeviceinfokey of the file src/afc.c of the component Device Info Handler. Performing a manipulation of the argument Value results in memory corruption. The attack requires a local...

SUSE CVE-2026-116260

A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function servicereceive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be performed from remote. The exploit has been made available to the...