CVE-2026-116261 — libimobiledevice AFC File afc.c afc_file_open out-of-bounds read
A vulnerability was identified in libimobiledevice up to version 1.4.0 in the AFC File Handler function afc_file_open in src/afc.c. Manipulation of the bytes argument leads to an out-of-bounds read. The attack can be initiated remotely, and the exploit has been publicly disclosed and may be used.
CERT24