Lucene search

K
osvGoogleOSV:CVE-2022-1534
HistoryApr 29, 2022 - 11:15 a.m.

CVE-2022-1534

2022-04-2911:15:10
Google
osv.dev
3
cve-2022-1534
buffer over-read
github
libmobi
sensitive information
memory crash
software

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

17.8%

Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

17.8%