CVE-2017-5834: Libimobiledevice Libplist

Medium severity, CVSS 5.5. EPSS: 1.3% chance of exploitation in the next 30 days.

The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.

Affected products

• Libimobiledevice Libplist: any version

Published 2017-03-03. Last modified 2026-06-17.