CVE-2022-1908

Buffer Over-read in bfabiszewski/libmobi

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

Affected

bfabiszewski · bfabiszewski/libmobi

CVSS v3.1 NVD

8.1 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

CVSS v3.0 HUNTR

3.6 LOWCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

CVSS v2.0 NVD

5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P

EPSS

0.71% chance of exploitation in the next 30 days, 53rd percentile

Published

2022-05-27

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8

Security advisories

• bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba

References

• CVE Record
• NVD entry