Approved changes feed: RSS · Atom
cpe:2.3:a:libimobiledevice:libplist:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Libimobiledevice (20aa7f0c-77d6-5666-a295-0cbef43d2ac3) |
|---|---|
| Product | Libplist (12bad0dc-9bdc-5611-93dc-b925e7277691) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libplist |
purl2cpe | 2026-06-01 10:18:19.325433 |
pkg:deb/ubuntu/libplist |
purl2cpe | 2026-06-01 10:18:19.325436 |
pkg:github/chronic-dev/libplist |
purl2cpe | 2026-06-01 10:18:19.325439 |
pkg:github/jonathanbeck/libplist |
purl2cpe | 2026-06-01 10:18:19.325441 |
pkg:github/libimobiledevice/libplist |
purl2cpe | 2026-06-01 10:18:19.325444 |
pkg:gitlab/redhat/libplist |
purl2cpe | 2026-06-01 10:18:19.325447 |
pkg:rpm/centos/libplist |
purl2cpe | 2026-06-01 10:18:19.325449 |
pkg:rpm/fedora/libplist |
purl2cpe | 2026-06-01 10:18:19.325452 |
pkg:rpm/opensuse/libplist |
purl2cpe | 2026-06-01 10:18:19.325455 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7982 |
vulnerable | 2026-06-08 05:10:06.668929 |
Details available
Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.
Published: 2017-04-20T14:00:00.000Z
Updated: 2024-08-05T16:19:29.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5836 |
vulnerable | 2026-06-08 05:09:49.900755 |
Details available
The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY and then triggers an invalid free.
Published: 2017-03-03T15:00:00.000Z
Updated: 2024-08-05T15:11:48.884Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5835 |
vulnerable | 2026-06-08 05:09:49.900399 |
Details available
libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
Published: 2017-03-03T15:00:00.000Z
Updated: 2024-08-05T15:11:48.899Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5834 |
vulnerable | 2026-06-08 05:09:49.900040 |
Details available
The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.
Published: 2017-03-03T15:00:00.000Z
Updated: 2024-08-05T15:11:48.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5545 |
vulnerable | 2026-06-08 05:09:47.183344 |
Details available
The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.
Published: 2017-01-21T01:00:00.000Z
Updated: 2024-08-05T15:04:15.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5209 |
vulnerable | 2026-06-08 05:09:39.351329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.