Out-of-bounds Read in Bfabiszewski Bfabiszewski/libmobi
CVE-2022-1534
Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
EPSS: 0.003 (26.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.
Affected products
- Bfabiszewski Bfabiszewski/libmobi — versions unspecified
- Libmobi_project Libmobi
Weakness classification (CWE)
References
- security@huntr.dev (x_refsource_CONFIRM, Exploit, Patch, Third Party Advisory, Issue Tracking)
- security@huntr.dev (Patch, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-1534?
- CVE-2022-1534 is a high-severity vulnerability in Bfabiszewski Bfabiszewski/libmobi, classified under Buffer Over-read. CVSS score: 7.1/10. Published 2022-04-29.
- How severe is CVE-2022-1534?
- High severity. CVSS v3 base score is 7.1 out of 10.