CVE-2018-11438

The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer overflow) via a crafted mobi file.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-05-30

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Libmobi (Libmobi Project)

References

• http://seclists.org/fulldisclosure/2018/May/48