CVE-2025-66004

Publication date 11 December 2025

Last updated 15 December 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

5.7 · Medium

Score breakdown

Description

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

Status

Package Ubuntu Release Status
usbmuxd 25.10 questing
Fixed 1.1.1-6ubuntu0.25.10.1
25.04 plucky
Fixed 1.1.1-6ubuntu0.25.04.1
24.04 LTS noble
Fixed 1.1.1-5~exp3ubuntu2.1
22.04 LTS jammy
Fixed 1.1.1-2ubuntu0.1
20.04 LTS focal
Needs evaluation
18.04 LTS bionic
Needs evaluation
16.04 LTS xenial
Needs evaluation

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
usbmuxd

Severity score breakdown

Parameter Value
Base score 5.7 · Medium
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Scope Changed
Confidentiality None
Integrity impact Low
Availability impact Low
Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L

References

Related Ubuntu Security Notices (USN)

    • USN-7929-1
    • usbmuxd vulnerability
    • 15 December 2025

Other references