CVE-2017-5835

High

Published: 03/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

libplist allows attackers to cause a denial of service through large memory allocation and crash via vectors involving an offset size of zero.

Risk Assessment

An attack leading to denial of service may affect the availability of applications and systems using libplist, potentially resulting in service downtime.

Recommendation

It is recommended to update libplist to the latest version to mitigate the risk associated with this vulnerability.

Other vulnerabilities in libplist

CVE-2017-5836High
The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors involving an integer node that is treated as a PLIST_KEY, leading to an invalid free.

Original NVD description (English source)

libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.