CVE-2026-116259 | libimobiledevice up to 1.4.0 Device Info src/afc.c afc_get_device_info_key value memory corruption

October 25, 2026 Yanac

A vulnerability marked as problematic has been reported in libimobiledevice up to 1.4.0. This vulnerability affects the function afc_get_device_info_key of the file src/afc.c of the component Device Info Handler. Performing a manipulation of the argument Value results in memory corruption.

This vulnerability is reported as CVE-2026-116259. The attack requires a local approach. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More