Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2017-6435

libplist: Missing return value check from malloc()

The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruption) via a crafted plist file.

CVSS 3.0 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Libplist Project
Products
Libplist
CVE-2017-6436

libplist: Integer overflow in parse_string_node

The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.

CVSS 3.0 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Libplist Project
Products
Libplist
CVE-2017-6437

libplist: Out-of-bounds heap read in base64encode function

The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read) via a crafted plist file.

CVSS 3.0 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Libplist Project
Products
Libplist
CVE-2017-6438

libplist: Heap-based buffer overflow in parse_unicode_node

Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) and possibly code execution via a crafted plist file.

CVSS 3.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Libplist Project
Products
Libplist
CVE-2017-6439

libplist: Heap-based buffer overflow in parse_string_node

Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file.

CVSS 3.0 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Libplist Project
Products
Libplist
CVE-2017-6440

libplist: Memory allocation error in parse_data_node

The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.

CVSS 3.0 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Libplist Project
Products
Libplist