Libimobiledevice vulnerabilities

Products

• Libplist 7
• Libimobiledevice 2

Newest

• libimobiledevice usbmuxd Local privilege escalation in usbmuxd from arbitrary local user to usbmux CVE-2025-66004 Fix available 5.1 MediumDecember 10, 2025
• libimobiledevice libplist UIKit0 libplist XML xplist.c plist_from_xml xml external entity reference CVE-2015-10082 Fix available 5.5 MediumFebruary 21, 2023
• libimobiledevice libplist Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before... CVE-2017-7982 Fix available 5.5 MediumApril 20, 2017
• libimobiledevice libplist The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service... CVE-2017-5836 Fix available 7.5 HighMarch 3, 2017
• libimobiledevice libplist libplist allows attackers to cause a denial of service (large memory allocation and crash) via... CVE-2017-5835 Fix available 7.5 HighFebruary 28, 2017
• libimobiledevice libplist The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of... CVE-2017-5834 Fix available 5.5 MediumFebruary 28, 2017
• libimobiledevice libplist The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to... CVE-2017-5545 Fix available 9.1 CriticalJanuary 21, 2017
• libimobiledevice libplist The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers... CVE-2017-5209 Fix available 9.1 CriticalJanuary 11, 2017
• libimobiledevice, libimobiledevice libusbmuxd, canonical ubuntu linux +2 more +4 more The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote... CVE-2016-5104 Fix available 5.3 MediumJune 13, 2016
• libimobiledevice userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local... CVE-2013-2142 Fix available 3.3 LowAugust 17, 2013