Integer overflow

2021-09-0118:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.8%

JSON

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to code execution when parsing a crafted PDF book.

CPENameOperatorVersion
kindle_firmwarele5.13.4

CPE	Name	Operator	Version
	kindle_firmware	le	5.13.4

References

research.checkpoint.com/2021/i-can-take-over-your-kindle/