Skip to content
OpenAdvisories
High ALSA-2026:98105 1 CVE

Important: libimobiledevice security update

Published Nov 11, 2026 · Updated Nov 13, 2026

Ecosystem: AlmaLinux

Summary

libimobiledevice is a library for connecting to mobile devices including phones and music players

Security Fix(es):

* libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive (CVE-2026-116260)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 2

ReleasePackageFixed in
AlmaLinux · 8 libimobiledevice 1.2.0-18.el8_10
AlmaLinux · 8 libimobiledevice-devel 1.2.0-18.el8_10

Vulnerabilities 1

  • High 7.3
    CVE-2026-116260

    libimobiledevice AFC Service afc.c service_receive double free

    A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be performed from remote. The …

    libimobiledevice libimobiledevice Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-116260
  • report
    https://bugzilla.redhat.com/2560609
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-98105.html