Summary
libimobiledevice is a library for connecting to mobile devices including phones and music players
Security Fix(es):
* libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive (CVE-2026-116260)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | libimobiledevice | 0:1.2.0-18.el8_10 |
Vulnerabilities 1
-
High 7.3
libimobiledevice AFC Service afc.c service_receive double free
A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be performed from remote. The …