CVE-2025-13837

A flaw was found in the plistlib module in the Python standard library. The amount of data to read from a Plist file is specified in the file itself. This issue allows a specially crafted Plist file to cause an application to allocate a large amount of memory, potentially resulting in allocations...

BIT-LIBPYTHON-2022-48564

readints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

PT-2020-6971 · Python +7 · Python +7

Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.9.2 Description: The issue is related to the read ints function in the plistlib.py component of the Python interpreter, which is vulnerable to uncontrolled resource consumption. This can be exploited by a remote...

[SECURITY] Fedora 24 Update: libplist-2.0.0-1.fc24

libplist is a library for manipulating Apple Binary and XML Property Lists...

[SECURITY] Fedora 25 Update: libplist-2.0.0-1.fc25

libplist is a library for manipulating Apple Binary and XML Property Lists...

[SECURITY] Fedora 26 Update: libplist-2.0.0-1.fc26

libplist is a library for manipulating Apple Binary and XML Property Lists...

Debian DLA-840-1 : libplist security update

Several vulnerabilities were discovered in libplist, a library for reading and writing the Apple binary and XML property lists format. A maliciously crafted plist file could cause an application to crash by triggering a heap-based buffer overflow and memory allocation error in the plistfrombin...

[SECURITY] Fedora 20 Update: libplist-1.11-2.fc20

libplist is a library for manipulating Apple Binary and XML Property Lists...

Fedora 15 : libreoffice-3.3.3.1-7.fc15 (2011-14036)

Update for LibreOffice to handle parsing invalid .doc property lists Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...