Ubuntu 25.10 usbmuxd Important File Overwrite CVE-2025-66004

ubuntu

December 15, 2025

usbmuxd could be made to overwrite files.

Summary

usbmuxd could be made to overwrite files.

Software Description:

- usbmuxd: USB multiplexor daemon for iPhone and iPod Touch devices

Details:

It was discovered that usbmuxd incorrectly handled certain paths received

with the SavePairRecord command. A local attacker could possibly use this

issue to delete and write files named *.plist in arbitrary locations.

Topics Covered

security advisory file overwrite Ubuntu important local attack usbmuxd

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  usbmuxd                         1.1.1-6ubuntu0.25.10.1

Ubuntu 25.04
  usbmuxd                         1.1.1-6ubuntu0.25.04.1

Ubuntu 24.04 LTS
  usbmuxd                         1.1.1-5~exp3ubuntu2.1

Ubuntu 22.04 LTS
  usbmuxd                         1.1.1-2ubuntu0.1

In general, a standard system update will make all the necessary changes.