Name
libplist
Version
2.7.0
Type
library
Description
A library to handle Apple Property List format whereas it's binary or XML
Licenses
GPL-2.0-only & LGPL-2.1-only
PURL
-
CPE
cpe:2.3:*:libimobiledevice:libplist:2.7.0:*:*:*:*:*:*:*
Other Versions#
Patches#
#
Title
Author
Resolve
1
test: fix operator error
Ankur Tyagi <ankur.tyagi85@gmail.com>
2
ostep-invalid-types.test: Fix ostep-invalid-types test to
Khem Raj <raj.khem@gmail.com>
Vulnerabilities#
Name
Analysis
Description
Not Affected
The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.
Not Affected
libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
Not Affected
The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.