Skip to content
OpenAdvisories
High ELSA-2026-98105 1 CVE

Important: libimobiledevice security update (Oracle Linux 8)

Published Nov 11, 2026 · Updated Nov 11, 2026

Ecosystem: Oracle Linux

Summary

[1.2.0-18]
- Fix double free in afc_receive_data() when service_receive() fails

[1.2.0-17]
- CVE-2026-116260 libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive
double free in service_receive

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 libimobiledevice 0:1.2.0-18.el8_10
Oracle Linux · 8 libimobiledevice-devel 0:1.2.0-18.el8_10

Vulnerabilities 1

  • High 7.3
    CVE-2026-116260

    libimobiledevice AFC Service afc.c service_receive double free

    A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be performed from remote. The …

    libimobiledevice libimobiledevice Debian Ubuntu