CVE-2021-3751

libmobi is vulnerable to Out-of-bounds Write...

CVE-2021-3751

CVE-2021-3751 affects libmobi, a C library for Mobipocket/Kindle MOBI handling. The connected documents describe an out-of-bounds write in mobi_buffer_move that can cause heap/write-after-bounds and, in the PoC, remote code execution via crafted input (RCE by overwriting control-flow memory). The...