Libimobiledevice

10 CVEs across 4 Libimobiledevice products. Browse Libimobiledevice vulnerabilities, severities, and proof-of-concept exploits.

Libimobiledevice products with known CVEs

ProductCVEs
Libplist7
Libimobiledevice2
Libusbmuxd1
Usbmuxd1
Libimobiledevice CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-66004Medium5.72025-12-10A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a2…
CVE-2015-10082Medium5.52023-02-21A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the comp…
CVE-2017-7982Medium5.52017-04-20Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service…
CVE-2017-5836High7.52017-03-03The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated…
CVE-2017-5835High7.52017-03-03libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
CVE-2017-5834Medium5.52017-03-03The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.
CVE-2017-5545Critical9.12017-01-21The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a deni…
CVE-2017-5209Critical9.12017-01-11The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a…
CVE-2016-5104Medium5.32016-06-13The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate…
CVE-2013-21422014-01-19userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1)…