Libimobiledevice Libplist — known CVE vulnerabilities

Every CVE whose affected-product data names Libimobiledevice Libplist, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2017-5545 — CVSS 9.1 (critical): The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process…
• CVE-2017-5209 — CVSS 9.1 (critical): The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from…
• CVE-2017-5835 — CVSS 7.5 (high): libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
• CVE-2017-5836 — CVSS 7.5 (high): The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer…
• CVE-2017-5834 — CVSS 5.5 (medium): The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via…
• CVE-2015-10082 — CVSS 5.5 (medium): A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file…
• CVE-2017-7982 — CVSS 5.5 (medium): Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause…