Bug 2565321 (CVE-2026-116261)

Summary: CVE-2026-116261 libimobiledevice: libimobiledevice: Information disclosure via out-of-bounds read in AFC file handler
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: low Docs Contact:
Priority: low    
Version: unspecifiedCC: rhel-process-autobot, watson-tool-maintainers
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in libimobiledevice. This out-of-bounds read vulnerability allows a remote attacker to cause unauthorized information disclosure. By supplying manipulated input parameters to the Apple File Conduit (AFC) file opening routine, an attacker can cause the application to read memory past designated buffer boundaries.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2566106, 2566107, 2566108, 2566109, 2566110    
Bug Blocks:    

Description OSIDB Bzimport 2026-11-02 17:43:29 UTC 
A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afc_file_open of the file src/afc.c of the component AFC File Handler. The manipulation of the argument bytes leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.