7 results · Feed
-
Medium 5.4
libimobiledevice Web Inspector webinspector.c webinspector_receive_with_timeout heap-based overflow
A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspector_receive_with_timeout of the file src/webinspector.c of the component Web Inspector. The manipulation results in heap-based buffer overflow. It is p…
-
Low 3.5
libimobiledevice AFC File afc.c afc_file_open out-of-bounds
A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afc_file_open of the file src/afc.c of the component AFC File Handler. The manipulation of the argument bytes leads to out-of-bounds read. It is possible to i…
-
High 7.3
libimobiledevice AFC Service afc.c service_receive double free
A weakness has been identified in libimobiledevice up to 1.4.0. This issue affects the function service_receive of the file src/afc.c of the component AFC Service. Executing a manipulation can lead to double free. The attack may be performed from remote. The …
-
Medium 5.3
libimobiledevice Device Info afc.c afc_get_device_info_key memory corruption
A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afc_get_device_info_key of the file src/afc.c of the component Device Info Handler. Performing a manipulation of the argument Value results in memory …
-
Medium 6.3
libimobiledevice AFC afc.c heap-based overflow
A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly availa…
-
Unscored —
The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass inte…
-
Unscored —
userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbi…