CVE-2012-0065
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1...
CVE-2012-0065 is a medium vulnerability (CVSS 4.6) in Nikias Bassen Usbmuxd, published October 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.76%, the 55th percentile. Fixed in usbmuxd 1.0.7-2.
- Severity
- 4.6 MediumCVSS 2.0, NVD
- Exploit chance
- 0.76%EPSS, 55th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.0.7-2usbmuxd +2 more
Description
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
CVE-2012-0065- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
CVE-2012-0065- Updated
- 2026-11-02
EUVDEUVD-2012-0103No score
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
EUVD-2012-0103- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vqcg-7gjc-556xNo score
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1...
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
GHSA-vqcg-7gjc-556x- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
CVE-2012-0065- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0065No score
Heap-based buffer overflow in the receive_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proximate attackers to execute arbitrary code via a long SerialNumber field in a property list.
- Record
DEBIAN-CVE-2012-0065- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
mandriva.com/security/advisories?name=MDVSA-2013:133
openwall.com/lists/oss-security/2012/01/19/26
wiki.mageia.org/en/Support/Advisories/MGASA-2012-0228
securityfocus.com/bid/51573
secunia.com/advisories/47545
Show 8 moreShow less
git.marcansoft.com?p=usbmuxd.git%3Ba=commitdiff%3Bh=f794991993af56a74795891b4ff9da506bc893e6
exchange.xforce.ibmcloud.com/vulnerabilities/72546
bugs.gentoo.org/show_bug.cgi?id=399409
nvd.nist.gov/vuln/detail/CVE-2012-0065
github.com/advisories/GHSA-vqcg-7gjc-556x
security-tracker.debian.org/tracker/CVE-2012-0065