Out-of-Bounds Read Vulnerability in libimobiledevice's AFC File Handler

CVE-2026-116261

What is CVE-2026-116261?

A security vulnerability has been identified in the AFC File Handler of libimobiledevice. Specifically, the function afc_file_open in src/afc.c is susceptible to out-of-bounds read due to improper handling of its argument bytes. This vulnerability can be exploited remotely, potentially allowing unauthorized access to sensitive data. The issue has been publicly disclosed, and although the vendor was informed prior to this disclosure, no response has been received, raising concerns about the ongoing risk to users.

References