libimobiledevice libplist 1.12

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:libimobiledevice:libplist:1.12:*:*:*:*:*:*:*

part: a version: 1.12 update: *

VendorLibimobiledevice (20aa7f0c-77d6-5666-a295-0cbef43d2ac3)
ProductLibplist (12bad0dc-9bdc-5611-93dc-b925e7277691)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libplist purl2cpe 2026-06-01 10:18:19.325608
pkg:deb/ubuntu/libplist purl2cpe 2026-06-01 10:18:19.325609
pkg:github/chronic-dev/libplist purl2cpe 2026-06-01 10:18:19.325611
pkg:github/jonathanbeck/libplist purl2cpe 2026-06-01 10:18:19.325612
pkg:github/libimobiledevice/libplist purl2cpe 2026-06-01 10:18:19.325614
pkg:gitlab/redhat/libplist purl2cpe 2026-06-01 10:18:19.325615
pkg:rpm/centos/libplist purl2cpe 2026-06-01 10:18:19.325617
pkg:rpm/fedora/libplist purl2cpe 2026-06-01 10:18:19.325618
pkg:rpm/opensuse/libplist purl2cpe 2026-06-01 10:18:19.325620

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-10082 vulnerable 2026-06-08 05:06:24.640261 UIKit0 libplist XML xplist.c plist_from_xml xml external entity reference
MEDIUM (5.5)
A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086cb139af7c82845f6d565e636073ff4b37440. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221499.
Published: 2023-02-21T07:00:05.828Z
Updated: 2024-08-06T08:58:26.353Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.