Denial of Service Vulnerability in Libplist Affects Multiple Applications

CVE-2017-5835

What is CVE-2017-5835?

Libplist, a library used for managing binary property lists, is susceptible to a vulnerability that allows attackers to execute a denial-of-service attack. This is achieved through a specific case where an offset size of zero can trigger excessive memory allocation, ultimately leading to application crashes. It highlights a critical issue within applications relying on libplist for handling data, necessitating timely patches and mitigations to ensure system stability and security.

References