CVE-2022-1534CWE-126

Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi

Medium · published April 29, 2022

CVSS v3.0
6.6
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

The record
Technical detail
CVSS v3.0
6.6 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00347 · 27.1th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2022-04-29T10:15Z
EPSS history
Timeline
  • 29 APR 10:15Z
    Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi
    cvelistv5