CVE-2012-0065
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1...
CVE-2012-0065 is a medium vulnerability (CVSS 4.6) in Nikias Bassen Usbmuxd, published October 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.76%, the 55th percentile. Fixed in usbmuxd 1.0.7-2.
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
CVE-2012-0065- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
CVE-2012-0065- Updated
- 2026-11-02
EUVDEUVD-2012-0103 No score
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
EUVD-2012-0103- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vqcg-7gjc-556x No score
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1...
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
GHSA-vqcg-7gjc-556x- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
CVE-2012-0065- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0065 No score
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
DEBIAN-CVE-2012-0065- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
mandriva.com/security/advisories?name=MDVSA-2013:133
openwall.com/lists/oss-security/2012/01/19/26
wiki.mageia.org/en/Support/Advisories/MGASA-2012-0228
securityfocus.com/bid/51573
secunia.com/advisories/47545
Show 8 moreShow less
git.marcansoft.com?p=usbmuxd.git%3Ba=commitdiff%3Bh=f794991993af56a74795891b4ff9da506bc893e6
exchange.xforce.ibmcloud.com/vulnerabilities/72546
bugs.gentoo.org/show_bug.cgi?id=399409
nvd.nist.gov/vuln/detail/CVE-2012-0065
github.com/advisories/GHSA-vqcg-7gjc-556x
security-tracker.debian.org/tracker/CVE-2012-0065