Libimobiledevice Libplist
7 CVEs affecting Libimobiledevice Libplist. Latest disclosed: 2023-02-21. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-5545 | Critical | 9.1 | 2017-01-21 | The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a deni… |
CVE-2017-5209 | Critical | 9.1 | 2017-01-11 | The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a… |
CVE-2017-5836 | High | 7.5 | 2017-03-03 | The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated… |
CVE-2017-5835 | High | 7.5 | 2017-03-03 | libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero. |
CVE-2015-10082 | Medium | 5.5 | 2023-02-21 | A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the comp… |
CVE-2017-7982 | Medium | 5.5 | 2017-04-20 | Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service… |
CVE-2017-5834 | Medium | 5.5 | 2017-03-03 | The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file. |