CVE-2026-116258 | libimobiledevice up to 1.4.0 AFC src/afc.c heap-based overflow

October 25, 2026 Yanac

A vulnerability labeled as critical has been found in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow.

This vulnerability is documented as CVE-2026-116258. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More