The plist_free_data function libplist allows attackers to cause a denial of service

...

AZL-7269 CVE-2017-5836 affecting package libplist 2.1.0-4

The plistfreedata function in plist.c in libplist allows attackers to cause a denial of service crash via vectors involving an integer node that is treated as a PLISTKEY and then triggers an invalid free...