CVE details
CVE-2026-116262
A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspector_receive_with_timeout of the file src/webinspector.c of the component Web Inspector. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- Score
- 5.3 medium
- Published
- 2026-10-26
- Links
- NVD · cve.org · Report wrong data
Matched ports (2)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| comms/libimobiledevice | libimobiledevice | 1.4.0 | unaddressed | jhale@FreeBSD.org |
| comms/py-libimobiledevice | py312-libimobiledevice | 1.4.0 | unaddressed | jhale@FreeBSD.org |
Template for a VuXML entry
Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.
<vuln vid="FIXME (make newentry)">
<topic>FIXME -- FIXME</topic>
<affects>
<package>
<name>libimobiledevice</name>
<range><lt>FIXME</lt></range>
</package>
<package>
<name>py312-libimobiledevice</name>
<range><lt>FIXME</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>A vulnerability was detected in libimobiledevice up to 1.4.0. The
affected element is the function webinspector_receive_with_timeout of
the file src/webinspector.c of the component Web Inspector. The
manipulation results in heap-based buffer overflow. It is possible to
launch the attack remotely. The exploit is now public and may be used.
The vendor was contacted early about this disclosure but did not
respond in any way.</p>
</body>
</description>
<references>
<cvename>CVE-2026-116262</cvename>
<url>https://nvd.nist.gov/vuln/detail/CVE-2026-116262</url>
</references>
<dates>
<discovery>2026-10-26</discovery>
<entry>2026-10-26</entry>
</dates>
</vuln>