CVE-2021-3889

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3889

libmobi is vulnerable to Use of Out-of-range Pointer Offset...

CVE-2021-3889

CVE-2021-3889 affects Libmobi, a C library for MOBI/Kindle formats. Connected sources describe an out-of-bounds read in mobi_decompress_huffman_internal caused by unsafe Huffman code_length handling, leading to a heap-buffer-overflow and potential memory disclosure or crash when processing input....