cvedb.io
CVE-2017-5209
CRITICAL · CVSS 9.1
EPSS exploitation probability: 0%
Published 2017-01-11T16:59:00.377 · Last modified 2026-06-17T01:20:10.160

Summary

The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.

Affected products

libimobiledevice — libplist

Does this affect you?

Add your gear to cvedb and we'll alert you only when libimobiledevice ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.