CVE-2022-1534 Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi
Attackers can trigger a buffer over-read in libmobi to disclose sensitive memory data or cause a crash via crafted MOBI files.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-1534?
CVE-2022-1534 is a medium-severity vulnerability in bfabiszewski/libmobi, published on 29 Apr 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
Which versions are affected by CVE-2022-1534?
It affects 1 product.
Products include Libmobi Project Libmobi.
How do I fix CVE-2022-1534?
Upgrade to a fixed version.
Is CVE-2022-1534 being exploited?
There is no known exploitation of CVE-2022-1534 in the wild and no public exploit code.
Other vulnerabilities in bfabiszewski/libmobi
Sources
Also known as DEBIAN-CVE-2022-1534, GHSA-wmqx-7q2f-fcf6, UBUNTU-CVE-2022-1534.