The ELA-1599-1 security update affects the usbmuxd package, which is used to manage iPhone and iPod Touch devices. The issue was discovered in how the daemon handles certain paths received with the SavePairRecord command. This flaw can be exploited by a local attacker to delete and write files named *.plist in arbitrary locations on the system.
ELA-1599-1 usbmuxd security update
ELA-1599-1 usbmuxd security update
ELA-1599-1 usbmuxd security update
Package : usbmuxd
Version : 1.1.0-2+deb9u1 (stretch), 1.1.1~git20181007.f838cf6-1+deb10u1 (buster)
Related CVEs :
CVE-2025-66004
It was discovered that usbmuxd, USB multiplexor daemon for iPhone and
iPod Touch devices, incorrectly handled certain paths received with
the SavePairRecord command. A local attacker could possibly use this
issue to delete and write files named *.plist in arbitrary locations.ELA-1599-1 usbmuxd security update
