CVE-2018-11435

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

Heap overflow

The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11433

The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11433

The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11435

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

CVE-2018-11432

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11432

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11436

The bufferaddraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11438

The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...

UBUNTU-CVE-2018-11432

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11434

The bufferfill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11437

The mobireconstructparts function in parserawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

UBUNTU-CVE-2018-11435

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

CVE-2018-11438

CVE-2018-11438 affects Libmobi 0.3. The vulnerability resides in mobi_decompress_lz77 (compression.c) and allows remote code execution via a crafted MOBI file, caused by a heap-based buffer overflow. Confirmed affected component is Libmobi 0.3; the issue is exploitable over the network through cr...

CVE-2018-11432

The connected documents confirm a vulnerability in Libmobi version 0.3 affecting the mobi_parse_mobiheader function in read.c, where a crafted MOBI file can cause information disclosure via a heap-based buffer over-read. This is a remote-triggered flaw with potential partial confidentiality impac...

CVE-2018-11436

CVE-2018-11436 affects Libmobi version 0.3. The vulnerability is in the buffer_addraw function of buffer.c, enabling a remote attacker to disclose information via a crafted MOBI file due to a heap-based over-read. The exploitation vector and impact are described as information disclosure; no in-w...

CVE-2018-11434

The CVE-2018-11434 vulnerability affects Libmobi 0.3, where the buffer_fill64 function in compression.c can cause a heap-based information disclosure when processing specially crafted MOBI files. The issue is a heap-based over-read introduced in the affected code path, enabling potential leakage ...

CVE-2018-11433

CVE-2018-11433 affects Libmobi 0.3. The vulnerability lies in mobi_get_kf8boundary_seqnumber (util.c), which can disclose memory via a crafted MOBI file due to a heap-based buffer over-read. Remote attackers could exploit this by using a specially crafted MOBI, enabling information disclosure. Th...

CVE-2018-11437

The CVE-2018-11437 entry concerns Libmobi 0.3, where the mobi_reconstruct_parts function in parse_rawml.c can disclose information via a specially crafted MOBI file. The vulnerability is described as a read access disclosure, triggered by crafted input. No exploit details, affected versions beyon...

CVE-2018-11432

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...