Vulnerabilities > Libimobiledevice > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-04-20 CVE-2017-7982 Integer Overflow or Wraparound vulnerability in Libimobiledevice Libplist
Integer overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted plist file.
local
low complexity
libimobiledevice CWE-190
5.5
2017-03-03 CVE-2017-5834 Out-of-bounds Read vulnerability in Libimobiledevice Libplist
The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file.
local
low complexity
libimobiledevice CWE-125
5.5
2016-06-13 CVE-2016-5104 Improper Access Control vulnerability in multiple products
The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restrictions and communicate with services on iOS devices by connecting to an IPv4 TCP socket.
network
low complexity
libimobiledevice canonical opensuse CWE-284
5.3