Libplist Project Libplist — known CVE vulnerabilities

Every CVE whose affected-product data names Libplist Project Libplist, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2017-6438 — CVSS 7.3 (high): Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a…
• CVE-2017-6435 — CVSS 5.0 (medium): The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory…
• CVE-2017-6436 — CVSS 5.0 (medium): The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory…
• CVE-2017-6437 — CVSS 5.0 (medium): The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds…
• CVE-2017-6439 — CVSS 5.0 (medium): Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a…
• CVE-2017-6440 — CVSS 5.0 (medium): The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory…