CVE-2022-1534

CVE-2022-1534 affects the LibMobi project (bfabiszewski/libmobi) prior to version 0.11. The issue is a buffer over-read at parse_rawml.c:1416, causing reads past the end of the intended buffer. This can lead to leakage of memory contents or a denial via crash. No exploit details are provided in t...

CVE-2022-1533

CVE-2022-1533 affects the GitHub repository bfabiszewski/libmobi, with a Buffer Over-read in libmobi prior to 0.11. The flaw is described as capable of arbitrary code execution. The issue is documented across multiple feeds (NVD, OSV, Debian/Ubuntu trackers, and related Nessus entry), consistentl...

CVE-2022-2279

CVE-2022-2279 : NULL Pointer Dereference in the GitHub project libmobi (bfabiszewski/libmobi) prior to 0.11. Affected component: the libmobi codebase; root cause: NULL pointer dereference. Impact information in public feeds ranges from medium to high for availability depending onCVSS variant; exp...

CVE-2022-1987

CVE-2022-1987 describes a Buffer Over-read in the GitHub repository bfabiszewski/libmobi prior to 0.11. The vulnerability affects libmobi before version 0.11 and is due to a buffer over-read; CVSS details in the initial record indicate a network attack vector with high impact on confidentiality a...

CVE-2022-29788

Libmobi before v0.10 contains a NULL pointer dereference in mobi_buffer_getpointer, allowing a crafted MOBI file to trigger a Denial of Service. This is documented across multiple sources (CVE-2022-29788) and is confirmed by NVD/OSV entries. Affected component is the Libmobi library; impact is Do...

CVE-2022-1908

CVE-2022-1908 affects Libmobi (the MOBI-handling C library) up to version 0.11, with a Buffer Over-read vulnerability. Public records describe memory-operation weaknesses that can lead to a buffer overflow and potential DoS when exploited locally; several advisories/assessments (Ubuntu USN 7638-1...

CVE-2021-3888

CVE-2021-3888 affects libmobi. The vulnerability is a buffer-overread/write caused by out-of-range pointer offsets in the Huffman-based decoding path, where the code does not validate index bounds for symbols before accessing symbol data. This can lead to memory reads/writes beyond allocated buff...

CVE-2022-1907

Libmobi (bfabiszewski/libmobi) prior to 0.11 has a memory-handling flaw resulting in a Buffer Over-read/Overflow in the mobi buffer handling (mobi_buffer_getpointer), with potential denial-of-service impact. Multiple sources document CVE-2022-1907 across Linux distributions (Ubuntu USN-7638-1, De...

CVE-2021-3751

CVE-2021-3751 affects libmobi, a C library for Mobipocket/Kindle MOBI handling. The connected documents describe an out-of-bounds write in mobi_buffer_move that can cause heap/write-after-bounds and, in the PoC, remote code execution via crafted input (RCE by overwriting control-flow memory). The...

CVE-2021-3889

CVE-2021-3889 affects Libmobi, a C library for MOBI/Kindle formats. Connected sources describe an out-of-bounds read in mobi_decompress_huffman_internal caused by unsafe Huffman code_length handling, leading to a heap-buffer-overflow and potential memory disclosure or crash when processing input....