CVE Catalog
CVE-2017-5209
CriticalSummary
The base64decode function in base64.c in libimobiledevice libplist through version 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.
Risk Assessment
Organizations may be exposed to sensitive data leaks or system crashes, potentially leading to service downtime.
Recommendation
It is recommended to update libimobiledevice libplist to the latest version to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.