CVE-2018-11725

The mobiparseindexentry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted mobi file...