Name
libplist
Version
2.3.0+gi
Type
library
Description
A library to handle Apple Property List format whereas it's binary or XML
Licenses
GPL-2.0-only & LGPL-2.1-only
PURL
-
CPE
cpe:2.3:*:libimobiledevice:libplist:2.3.0+git:*:*:*:*:*:*:*
Other Versions#
Vulnerabilities#
Name
Analysis
Description
Not Affected
The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.
Not Affected
libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
Not Affected
The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.