PatchSiren

Libimobiledevice CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Libimobiledevice CVE published 2017-01-21

CVE-2017-5545

CVE-2017-5545 is a critical out-of-bounds read in libplist’s plistutil.c main function, affecting libplist through version 1.12. According to NVD and the CVE record, too-short Apple Property List input can trigger a buffer over-read, which may disclose sensitive process memory or crash the affected process. The CVE was published on 2017-01-21; the 2026 modification date reflects record updates, not the or [truncated]