CVE-2017-5209: libplist: base64decode buffer over-read via split encoded Apple Property List data

Severity: Critical

CVSS Score: 9.1

The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via split encoded Apple Property List data.