libplist project records

6 published records for vendor libplist project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
29Monitor	CVE-2017-6438No exploit	Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a delibplist project · libplist · CWE-787 Memory safety	High7.3	—	0.6%	Mar 15, 2017
20Monitor	CVE-2017-6439No exploit	Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denlibplist project · libplist · CWE-787 Memory safety Denial of service	Medium5.0	—	0.5%	Mar 15, 2017
20Monitor	CVE-2017-6435No exploit	The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corruptlibplist project · libplist · CWE-119 Memory safety Denial of service	Medium5.0	—	0.5%	Mar 15, 2017
20Monitor	CVE-2017-6436No exploit	The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocatlibplist project · libplist · CWE-20 Denial of service	Medium5.0	—	0.5%	Mar 15, 2017
20Monitor	CVE-2017-6437No exploit	The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read)libplist project · libplist · CWE-125 Memory safety Denial of service	Medium5.0	—	0.4%	Mar 15, 2017
20Monitor	CVE-2017-6440No exploit	The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocatiolibplist project · libplist · CWE-20 Denial of service	Medium5.0	—	0.4%	Mar 15, 2017

CVE-2017-6438
29Monitor
Heap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a de
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
libplist project · libplistMar 15, 2017
CVE-2017-6439
20Monitor
Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a den
MediumCVSS 5.0No exploitEPSS 0%
- Memory safety
- Denial of service
libplist project · libplistMar 15, 2017
CVE-2017-6435
20Monitor
The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory corrupt
MediumCVSS 5.0No exploitEPSS 0%
- Memory safety
- Denial of service
libplist project · libplistMar 15, 2017
CVE-2017-6436
20Monitor
The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocat
MediumCVSS 5.0No exploitEPSS 0%
- Denial of service
libplist project · libplistMar 15, 2017
CVE-2017-6437
20Monitor
The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds read)
MediumCVSS 5.0No exploitEPSS 0%
- Memory safety
- Denial of service
libplist project · libplistMar 15, 2017
CVE-2017-6440
20Monitor
The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocatio
MediumCVSS 5.0No exploitEPSS 0%
- Denial of service
libplist project · libplistMar 15, 2017