Libmobi Project Libmobi
21 CVEs affecting Libmobi Project Libmobi. Latest disclosed: 2022-07-01. Critical: 2, High: 10.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-3881 | Critical | 9.8 | 2021-10-15 | libmobi is vulnerable to Out-of-bounds Read |
CVE-2021-3751 | Critical | 9.8 | 2021-09-15 | libmobi is vulnerable to Out-of-bounds Write |
CVE-2018-11726 | High | 8.8 | 2018-06-19 | The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly h… |
CVE-2018-11724 | High | 8.8 | 2018-06-19 | The mobi_pk1_decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have… |
CVE-2018-11438 | High | 8.8 | 2018-05-30 | The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer overflow) via a cra… |
CVE-2022-1987 | High | 8.1 | 2022-06-03 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. |
CVE-2022-1908 | High | 8.1 | 2022-05-27 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. |
CVE-2022-1907 | High | 8.1 | 2022-05-27 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. |
CVE-2021-3889 | High | 8.1 | 2021-10-19 | libmobi is vulnerable to Use of Out-of-range Pointer Offset |
CVE-2021-3888 | High | 8.1 | 2021-10-19 | libmobi is vulnerable to Use of Out-of-range Pointer Offset |
CVE-2022-1533 | High | 7.8 | 2022-04-29 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution. |
CVE-2022-1534 | High | 7.1 | 2022-04-29 | Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the inten… |
CVE-2022-29788 | Medium | 6.5 | 2022-06-02 | libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2018-11725 | Medium | 6.5 | 2018-06-19 | The mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a cr… |
CVE-2018-11437 | Medium | 6.5 | 2018-05-30 | The mobi_reconstruct_parts function in parse_rawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) via a craft… |
CVE-2018-11436 | Medium | 6.5 | 2018-05-30 | The buffer_addraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi… |
CVE-2018-11435 | Medium | 6.5 | 2018-05-30 | The mobi_decompress_huffman_internal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) v… |
CVE-2018-11434 | Medium | 6.5 | 2018-05-30 | The buffer_fill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted… |
CVE-2018-11433 | Medium | 6.5 | 2018-05-30 | The mobi_get_kf8boundary_seqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via… |
CVE-2018-11432 | Medium | 6.5 | 2018-05-30 | The mobi_parse_mobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted… |