DEBIAN-CVE-2026-116262
- Source
- https://security-tracker.debian.org/tracker/CVE-2026-116262
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-116262.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-116262
- Upstream
- CVE-2026-116262
- Published
- 2026-10-26T12:17:06Z
- Modified
- 2026-10-27T08:00:06Z
- Severity
-
- 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspector_receive_with_timeout of the file src/webinspector.c of the component Web Inspector. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- References
Affected packages
Debian:12 / libimobiledevice
Package
- Name
- libimobiledevice
- Purl
- pkg:deb/debian/libimobiledevice?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Debian:13 / libimobiledevice
Package
- Name
- libimobiledevice
- Purl
- pkg:deb/debian/libimobiledevice?arch=source&distro=trixie
Debian:14 / libimobiledevice
Package
- Name
- libimobiledevice
- Purl
- pkg:deb/debian/libimobiledevice?arch=source&distro=forky