1. Home
  2. CVE Database
  3. CVE-2022-1534
HIGH · 7.1

CVE-2022-1534

Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow att...

Vulnerability Description

Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
Libmobi ProjectLibmobi< 0.11

Related Weaknesses (CWE)

CWE-126CWE-125

References

FAQ

What is CVE-2022-1534?

CVE-2022-1534 is a vulnerability with a CVSS score of 7.1 (HIGH). Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow att...

How severe is CVE-2022-1534?

CVE-2022-1534 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-1534?

Check the references section above for vendor advisories and patch information. Affected products include: Libmobi Project Libmobi.