CVE-2018-11434

2018-05-3013:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

JSON

The buffer_fill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.

References

seclists.org/fulldisclosure/2018/May/48