Ubi Reader (Ubi Reader Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2023-01-31. Vendor: Ubi Reader Project.

CVEs of Ubi Reader

• CVE-2023-0591 - CVSS 5.5 (medium), 2023-01-31: ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of…
• CVE-2022-4572 - CVSS 7.1 (high), 2022-12-17: A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files…