CVE-2021-30354

2021-09-0117:43:38

CWE-680

checkpoint

www.cve.org

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.8%

JSON

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to code execution when parsing a crafted PDF book.

CNA Affected

[
  {
    "product": "Amazon Kindle e-reader",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to and including 5.13.4"
      }
    ]
  }
]

References

research.checkpoint.com/2021/i-can-take-over-your-kindle/