CVE-2022-1534: medium-severity vulnerability in bfabiszewski/libmobi
Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.6epss 0.3%
Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Affected products
bfabiszewski · bfabiszewski/libmobiRelated CVEs — bfabiszewski/libmobi
In the same product, most dangerous first.
CVE-2021-3889HIGHUse of Out-of-range Pointer Offset in bfabiszewski/libmobiEPSS 1.3%CVE-2021-3888HIGHUse of Out-of-range Pointer Offset in bfabiszewski/libmobiEPSS 1.3%CVE-2021-3751CRITICALOut-of-bounds Write in bfabiszewski/libmobiEPSS 1.2%CVE-2021-3881HIGHOut-of-bounds Read in bfabiszewski/libmobiEPSS 1.2%CVE-2022-1987LOWBuffer Over-read in bfabiszewski/libmobiEPSS 0.8%CVE-2022-1908LOWBuffer Over-read in bfabiszewski/libmobiEPSS 0.7%