CVE-2017-6439

CVE-2017-6439 describes a heap-based buffer overflow vulnerability in the parse_string_node function of libplist 1.12, a library used by libimobiledevice. This flaw allows a local attacker to trigger a denial of service by providing a specially crafted plist file. Rated Medium (CVSS 5.0), exploitation requires local access and user interaction, leading to a high impact on availability but no impact on confidentiality or integrity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.