PatchTheCVElibmobi vulnerabilities and fixes
Recent CVEs affecting libmobi, with upgrade or downgrade steps. 11 tracked.
libmobi has 11 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 11. Most recent: 2022-07-01. Highest priority: CVE-2021-3751 (score 62/100).
- CVE-2022-2279 MEDIUM 5.5 UPGRADE NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11.
- CVE-2022-29788 MEDIUM 6.5 UPGRADE libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer
- CVE-2022-1987 HIGH 8.1 UPGRADE Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
- CVE-2022-1908 HIGH 8.1 UPGRADE Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
- CVE-2022-1907 HIGH 8.1 UPGRADE Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
- CVE-2022-1534 HIGH 7.1 UPGRADE Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11
- CVE-2022-1533 HIGH 7.8 UPGRADE Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11
- CVE-2021-3889 HIGH 8.1 UPGRADE libmobi is vulnerable to Use of Out-of-range Pointer Offset
- CVE-2021-3888 HIGH 8.1 UPGRADE libmobi is vulnerable to Use of Out-of-range Pointer Offset
- CVE-2021-3881 CRITICAL 9.8 UPGRADE libmobi is vulnerable to Out-of-bounds Read
- CVE-2021-3751 CRITICAL 9.8 UPGRADE libmobi is vulnerable to Out-of-bounds Write
FAQ
How do I fix libmobi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libmobi being exploited right now?
None of the tracked libmobi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libmobi CVE should I patch first?
CVE-2021-3751 currently ranks highest (62/100): libmobi is vulnerable to Out-of-bounds Write.