Medium · 6.6 CVE-2022-1533 EUVD-2022-24830GHSA-wc9v-xvxc-2x5v

Buffer Over-read in bfabiszewski/libmobi

Published Apr 29, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: bfabiszewski Product: bfabiszewski/libmobi Package: libmobi Package: libmobi Ecosystem: Debian Ecosystem: Ubuntu

Description

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution.

Affected products

Vendor	Product	Affected	Fixed
bfabiszewski	bfabiszewski/libmobi	unspecified – < 0.11	0.11

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	libmobi	0.11+dfsg-1	—
Debian 13	libmobi	0.11+dfsg-1	—
Debian 12	libmobi	0.11+dfsg-1	—

Ubuntu