CVE-2018-11434

The bufferfill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11434

The CVE-2018-11434 vulnerability affects Libmobi 0.3, where the buffer_fill64 function in compression.c can cause a heap-based information disclosure when processing specially crafted MOBI files. The issue is a heap-based over-read introduced in the affected code path, enabling potential leakage ...