PatchTheCVElibmobi project vulnerabilities
Recent CVEs affecting libmobi project products. 11 tracked.
libmobi project has 11 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 11. Most recent: 2022-07-01. Highest priority: CVE-2021-3751 (score 62/100).
- CVE-2022-2279 MEDIUM 5.5 UPGRADE NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11.
- CVE-2022-29788 MEDIUM 6.5 UPGRADE libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer
- CVE-2022-1987 HIGH 8.1 UPGRADE Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
- CVE-2022-1908 HIGH 8.1 UPGRADE Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
- CVE-2022-1907 HIGH 8.1 UPGRADE Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
- CVE-2022-1534 HIGH 7.1 UPGRADE Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11
- CVE-2022-1533 HIGH 7.8 UPGRADE Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11
- CVE-2021-3889 HIGH 8.1 UPGRADE libmobi is vulnerable to Use of Out-of-range Pointer Offset
- CVE-2021-3888 HIGH 8.1 UPGRADE libmobi is vulnerable to Use of Out-of-range Pointer Offset
- CVE-2021-3881 CRITICAL 9.8 UPGRADE libmobi is vulnerable to Out-of-bounds Read
- CVE-2021-3751 CRITICAL 9.8 UPGRADE libmobi is vulnerable to Out-of-bounds Write
FAQ
How do I fix libmobi project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libmobi project being exploited right now?
None of the tracked libmobi project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libmobi project CVE should I patch first?
CVE-2021-3751 currently ranks highest (62/100): libmobi is vulnerable to Out-of-bounds Write.