Logo
componentlibplist
Name
libplist
Version
2.7.0
Type
library
Description
A library to handle Apple Property List format whereas it's binary or XML
Licenses
GPL-2.0-only & LGPL-2.1-only
PURL
-
CPE
cpe:2.3:*:libimobiledevice:libplist:2.7.0:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
2.2.0
scarthgap
2.3.0

Patches#


#
Title
Author
Resolve
1
test: fix operator error
Ankur Tyagi <ankur.tyagi85@gmail.com>
2
ostep-invalid-types.test: Fix ostep-invalid-types test to
Khem Raj <raj.khem@gmail.com>

Vulnerabilities#


Name
Analysis
Description
Not Affected
The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.
Not Affected
libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
Not Affected
The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.