Libimobiledevice
Libimobiledevice Libplist: vulnerabilidades y CVE
Libimobiledevice Libplist tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2015-10082 | Crítica (9.8) | 0.72% | — | 21 feb 2023 | A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external… |
| CVE-2017-7982 | Media (5.5) | 1.5% | — | 20 abr 2017 | Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a… |
| CVE-2017-5836 | Alta (7.5) | 2.7% | — | 3 mar 2017 | The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free. |
| CVE-2017-5835 | Alta (7.5) | 2.9% | — | 3 mar 2017 | libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero. |
| CVE-2017-5834 | Media (5.5) | 1.3% | — | 3 mar 2017 | The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file. |
| CVE-2017-5545 | Crítica (9.1) | 3.8% | — | 21 ene 2017 | The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List… |
| CVE-2017-5209 | Crítica (9.1) | 2.9% | — | 11 ene 2017 | The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded… |