CVE-2026-116260 — libimobiledevice AFC Service double free

A weakness in libimobiledevice up to version 1.4.0 affects the service_receive function in src/afc.c of the AFC Service component and may lead to a double free. The attack may be performed remotely, and an exploit has been made publicly available. The source states that the vendor was contacted early but did not respond.