libplist allows malicious users to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.
libimobiledevice libplist