CVE-2017-5545

Name of the Vulnerable Software and Affected Versions libplist versions prior to 1.12

Description The issue allows attackers to obtain sensitive information from process memory or cause a denial of service via Apple Property List data that is too short. This is due to a buffer over-read in the main function in plistutil.c.

Recommendations For versions prior to 1.12, update to version 1.12 or later to resolve the issue. As a temporary workaround, consider restricting the use of Apple Property List data to minimize the risk of exploitation.