CVE-2017-5834

CVE-2017-5834 is a denial-of-service vulnerability in the libplist library, specifically within the parse_dict_node function, affecting products like libimobiledevice. An attacker can trigger an out-of-bounds heap read and crash by providing a specially crafted file. This vulnerability has a medium severity CVSS score of 5.5, indicating a local attack vector with low complexity, requiring user interaction, and primarily leading to high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.