cve.bz

CVE-2022-1534

7.1 highEPSS 0.3%

High (7.1) in libmobi project libmobi. EPSS 0.3% chance of exploitation in the next 30 days.

Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

Severity

CVSS 3.1

7.1 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS
0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWEs
CWE-125, CWE-126
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON