CVE-2017-5209

CVE-2017-5209 is a critical buffer over-read vulnerability affecting libimobiledevice libplist versions through 1.12. Attackers can exploit this flaw remotely by providing specially crafted, split encoded Apple Property List data to the base64decode function, leading to information disclosure from process memory or a denial of service. With a CVSS score of 9.1, this vulnerability is considered highly severe, requiring no user interaction or privileges for exploitation. Despite its critical severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.