PT-2025-50315 · Usbmuxd+3 · Usbmuxd+3

Wolfgang Frisch · Published 2025-12-10 · Updated 2026-03-15 · CVE-2025-66004

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions usbmuxd versions prior to 3ded00c9985a5108cfc7591a309f9a23d57a8cba

Description A Path Traversal vulnerability exists in usbmuxd, potentially allowing local users to gain elevated privileges to the service user level. The issue is due to insufficient sanitization of file paths.

Recommendations Update usbmuxd to version 3ded00c9985a5108cfc7591a309f9a23d57a8cba or later.

Fix

LPE

Weakness Enumeration

CWE-35

Related Identifiers

AZL-72280

AZL-72290

CVE-2025-66004

DLA-4417-1

MGASA-2026-0039

OESA-2026-1556

SUSE-SU-2025:4435-1

SUSE-SU-2026:0042-1

USN-7929-1

Affected Products

Debian

Linuxmint

Ubuntu

Usbmuxd

References · 30

• https://osv.dev/vulnerability/SUSE-SU-2026:0042-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1556 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-66004 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-66004 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-66004 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-66004 · Security Note
• https://osv.dev/vulnerability/AZL-72290 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4435-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4417-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2026-0039 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7929-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7929-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-66004 · Security Note
• https://advisories.mageia.org/MGASA-2026-0039.html · Security Note
• https://ubuntu.com/security/CVE-2025-66004 · Vendor Advisory