CVE-2018-11435: Exposure of Sensitive Information to an Unauthorized Actor

The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...