CVE-2017-6438

CVE-2017-6438 describes a heap-based buffer overflow in the parse_unicode_node function of libimobiledevice libplist 1.12. This vulnerability allows a local attacker to trigger a denial of service or potentially execute arbitrary code by providing a specially crafted plist file. With a CVSS score of 7.3 (HIGH), it requires local access and user interaction, but could lead to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.