libimobiledevice libplist vulnerabilities

Latest libimobiledevice libplist CVEs

Newest publication first

1. CVE-2015-10082 UIKit0 libplist XML xplist.c plist_from_xml xml external entity reference

   Published 2023-02-21

   Critical·CVSS 9.8 EPSS 0.72%

   A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086cb139af7c82845f6d565e6...

2. CVE-2017-7982 Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and applica...

   Published 2017-04-20

   Medium·CVSS 5.5 EPSS 1.5%

   Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.

3. CVE-2017-5836 The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an inva...

   Published 2017-03-03

   High·CVSS 7.5 EPSS 2.8%

   The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.

4. CVE-2017-5835 libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.

   Published 2017-03-03

   High·CVSS 7.5 EPSS 2.9%

   libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.

5. CVE-2017-5834 The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.

   Published 2017-03-03

   Medium·CVSS 5.5 EPSS 1.3%

   The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.

6. CVE-2017-5545 The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Appl...

   Published 2017-01-21

   Critical·CVSS 9.1 EPSS 3.8%

   The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.

7. CVE-2017-5209 The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via...

   Published 2017-01-11

   Critical·CVSS 9.1 EPSS 2.9%

   The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.