VULNERABILITY INTELLIGENCE

CVE-2017-6440

CVSS score5 MEDIUM

EPSS probability0.44%

CISA KEVNot currently listed

Published2017-03-15

Last modified2026-06-17

Description

The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file.