CVE-2018-11434: Out-of-bounds Read

The bufferfill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11432: Out-of-bounds Read

The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11433: Out-of-bounds Read

The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11438: Out-of-bounds Write

The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...

CVE-2018-11436: Out-of-bounds Read

The bufferaddraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11435: Exposure of Sensitive Information to an Unauthorized Actor

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

CVE-2018-11437: Exposure of Sensitive Information to an Unauthorized Actor

The mobireconstructparts function in parserawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...

PT-2018-10565

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause information disclosure through a heap-based buffer over-read via a crafted mobi file. This is due to a problem in the mobi parse mobiheader function in read.c...

PT-2018-10567

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause information disclosure through a heap-based buffer over-read via a crafted mobi file. This is due to a problem in the buffer fill64 function in compression.c...

PT-2018-10568

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause information disclosure via a crafted mobi file, specifically through a read access violation in the mobi decompress huffman internal function. Recommendations For Libmo...

PT-2018-10566

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause information disclosure due to a heap-based buffer over-read via a crafted mobi file. This is related to the mobi get kf8boundary seqnumber function in util.c...

PT-2018-10569

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause information disclosure via a crafted mobi file, which leads to a heap-based buffer over-read in the buffer addraw function. Recommendations For Libmobi version 0.3, at...

PT-2018-10570

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause information disclosure via a crafted mobi file, specifically through the mobi reconstruct parts function in parse rawml.c. This can lead to read access violation...

PT-2018-10571

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause remote code execution via a crafted mobi file, exploiting a heap-based buffer overflow in the mobi decompress lz77 function. Recommendations For Libmobi version 0.3, at...