Browse CVEs

HIGH 8.8 CVE-2018-11724 The mobi_pk1_decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or pos… Libmobi No fix yet Fix from $1,9502018-06-19 HIGH 8.8 CVE-2018-11726 The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or … Libmobi No fix yet Fix from $1,9502018-06-19 MEDIUM 6.5 CVE-2018-11725 The mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure (heap-based buffer over-read… Libmobi No fix yet Fix from $1,6002018-06-19 HIGH 8.8 CVE-2018-11438 The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer overflow)… Libmobi No fix yet Fix from $1,9502018-05-30 MEDIUM 6.5 CVE-2018-11432 The mobi_parse_mobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via… Libmobi No fix yet Fix from $1,6002018-05-30 MEDIUM 6.5 CVE-2018-11433 The mobi_get_kf8boundary_seqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-… Libmobi No fix yet Fix from $1,6002018-05-30 MEDIUM 6.5 CVE-2018-11434 The buffer_fill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via … Libmobi No fix yet Fix from $1,6002018-05-30 MEDIUM 6.5 CVE-2018-11435 The mobi_decompress_huffman_internal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access vi… Libmobi No fix yet Fix from $1,6002018-05-30 MEDIUM 6.5 CVE-2018-11436 The buffer_addraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a cra… Libmobi No fix yet Fix from $1,6002018-05-30 MEDIUM 6.5 CVE-2018-11437 The mobi_reconstruct_parts function in parse_rawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) v… Libmobi No fix yet Fix from $1,6002018-05-30