The flaw resides in the AFC File Handler of libimobiledevice, specifically the afc_file_open function. An attacker can supply manipulated byte arguments, causing an out‑of‑bounds read. This permits the attacker to read arbitrary memory contents, potentially revealing sensitive data. The vulnerability is not an immediate code‑execution flaw, but the information disclosed could be leveraged in further attacks. The weakness is reflected in CWE‑119 and CWE‑125.

Any system using libimobiledevice up through version 1.4.0 is affected. The library is used to communicate with Apple devices, including iPhones and iPads, via the AFC protocol. Users running older or unpatched installations are at risk, regardless of operating system, because the vulnerability is in the library code itself.

The CVSS score is 5.1, indicating a moderate impact. The EPSS score is unavailable, so the current exploit probability cannot be quantified, but the vulnerability has been publicly disclosed and is listed as a known exploit on several CVE databases. It is not yet in the CISA KEV catalog. The only known attack vector is remote, relying on an attacker who can send crafted AFC requests to a device or a host running the library. Because the flaw is an out‑of‑bounds read, exploitation requires that the attacker can observe the data returned, which may be challenging but is feasible with the disclosed exploits.