Summary
It was discovered that usbmuxd incorrectly handled certain paths received
with the SavePairRecord command. A local attacker could possibly use this
issue to delete and write files named *.plist in arbitrary locations.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | usbmuxd | 1.1.1-2ubuntu0.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | usbmuxd | 1.1.1-5~exp3ubuntu2.1 |
| Ubuntu · 25.10 | usbmuxd | 1.1.1-6ubuntu0.25.10.1 |
Vulnerabilities 1
-
Medium 5.7
Local privilege escalation in usbmuxd from arbitrary local user to usbmux
A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.
References
-
report
https://ubuntu.com/security/CVE-2025-66004