CVEvulnerability

CVE-2022-1534

7.1 HIGH Published 2022-04-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.0 ([email protected])
6.6 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:P
Weaknesses
CWE-125, CWE-126

Description

Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

Affected configurations

• libmobi project libmobi (< 0.11)

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-126 Buffer Over-read weakness

References