Search
Find a vulnerability
Search criteria
20 vulnerabilities found for bfabiszewski/libmobi by bfabiszewski
CVE-2022-2279 (GCVE-0-2022-2279)
Vulnerability from nvd – Published: 2022-07-01 08:15 – Updated: 2024-08-03 00:32
VLAI
EPSS
VEX
Title
NULL Pointer Dereference in bfabiszewski/libmobi
Summary
NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11.
Severity
6.6 (Medium)
CWE
- CWE-476 - NULL Pointer Dereference
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/68c249e2-779d-4871-b7e… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/c0… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:32:09.597Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/68c249e2-779d-4871-b7e3-851f03aca2de"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/c0699c8693c47f14a2e57dec7292e862ac7adf9c"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476 NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-07-01T08:15:21.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/68c249e2-779d-4871-b7e3-851f03aca2de"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/c0699c8693c47f14a2e57dec7292e862ac7adf9c"
}
],
"source": {
"advisory": "68c249e2-779d-4871-b7e3-851f03aca2de",
"discovery": "EXTERNAL"
},
"title": "NULL Pointer Dereference in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-2279",
"STATE": "PUBLIC",
"TITLE": "NULL Pointer Dereference in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-476 NULL Pointer Dereference"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/68c249e2-779d-4871-b7e3-851f03aca2de",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/68c249e2-779d-4871-b7e3-851f03aca2de"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/c0699c8693c47f14a2e57dec7292e862ac7adf9c",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/c0699c8693c47f14a2e57dec7292e862ac7adf9c"
}
]
},
"source": {
"advisory": "68c249e2-779d-4871-b7e3-851f03aca2de",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-2279",
"datePublished": "2022-07-01T08:15:21.000Z",
"dateReserved": "2022-07-01T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:32:09.597Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1987 (GCVE-0-2022-1987)
Vulnerability from nvd – Published: 2022-06-03 07:50 – Updated: 2024-08-03 00:24
VLAI
EPSS
VEX
Title
Buffer Over-read in bfabiszewski/libmobi
Summary
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
Severity
CWE
- CWE-126 - Buffer Over-read
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/e8197737-7557-443e-a59… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/61… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:24:43.784Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-126",
"description": "CWE-126 Buffer Over-read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-06-03T07:50:10.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d"
}
],
"source": {
"advisory": "e8197737-7557-443e-a59f-2a86e8dda75f",
"discovery": "EXTERNAL"
},
"title": "Buffer Over-read in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1987",
"STATE": "PUBLIC",
"TITLE": "Buffer Over-read in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-126 Buffer Over-read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d"
}
]
},
"source": {
"advisory": "e8197737-7557-443e-a59f-2a86e8dda75f",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1987",
"datePublished": "2022-06-03T07:50:10.000Z",
"dateReserved": "2022-06-03T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:24:43.784Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1908 (GCVE-0-2022-1908)
Vulnerability from nvd – Published: 2022-05-27 08:35 – Updated: 2024-08-03 00:17
VLAI
EPSS
VEX
Title
Buffer Over-read in bfabiszewski/libmobi
Summary
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
Severity
CWE
- CWE-126 - Buffer Over-read
References
2 references
| URL | Tags |
|---|---|
| https://github.com/bfabiszewski/libmobi/commit/1e… | x_refsource_MISC |
| https://huntr.dev/bounties/a7436e88-0488-4bd4-816… | x_refsource_CONFIRM |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:17:00.944Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.6,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-126",
"description": "CWE-126 Buffer Over-read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-27T08:35:16.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8"
}
],
"source": {
"advisory": "a7436e88-0488-4bd4-816f-2e2c803e93e8",
"discovery": "EXTERNAL"
},
"title": "Buffer Over-read in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1908",
"STATE": "PUBLIC",
"TITLE": "Buffer Over-read in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.6,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-126 Buffer Over-read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
},
{
"name": "https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8"
}
]
},
"source": {
"advisory": "a7436e88-0488-4bd4-816f-2e2c803e93e8",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1908",
"datePublished": "2022-05-27T08:35:16.000Z",
"dateReserved": "2022-05-27T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:17:00.944Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1907 (GCVE-0-2022-1907)
Vulnerability from nvd – Published: 2022-05-27 08:30 – Updated: 2024-08-03 00:17
VLAI
EPSS
VEX
Title
Buffer Over-read in bfabiszewski/libmobi
Summary
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
Severity
CWE
- CWE-126 - Buffer Over-read
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/1e… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:17:00.917Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.6,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-126",
"description": "CWE-126 Buffer Over-read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-27T08:30:13.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
}
],
"source": {
"advisory": "4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012",
"discovery": "EXTERNAL"
},
"title": "Buffer Over-read in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1907",
"STATE": "PUBLIC",
"TITLE": "Buffer Over-read in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.6,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-126 Buffer Over-read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
}
]
},
"source": {
"advisory": "4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1907",
"datePublished": "2022-05-27T08:30:13.000Z",
"dateReserved": "2022-05-27T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:17:00.917Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1534 (GCVE-0-2022-1534)
Vulnerability from nvd – Published: 2022-04-29 10:15 – Updated: 2024-08-03 00:10
VLAI
EPSS
VEX
Title
Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi
Summary
Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
Severity
6.6 (Medium)
CWE
- CWE-126 - Buffer Over-read
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c0… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/fb… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:10:02.994Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c00-68ba9068ce3d"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-126",
"description": "CWE-126 Buffer Over-read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-04-29T10:15:14.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c00-68ba9068ce3d"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b"
}
],
"source": {
"advisory": "9a90ffa1-38f5-4685-9c00-68ba9068ce3d",
"discovery": "EXTERNAL"
},
"title": "Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1534",
"STATE": "PUBLIC",
"TITLE": "Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-126 Buffer Over-read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c00-68ba9068ce3d",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c00-68ba9068ce3d"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b"
}
]
},
"source": {
"advisory": "9a90ffa1-38f5-4685-9c00-68ba9068ce3d",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1534",
"datePublished": "2022-04-29T10:15:14.000Z",
"dateReserved": "2022-04-29T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:10:02.994Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1533 (GCVE-0-2022-1533)
Vulnerability from nvd – Published: 2022-04-29 10:15 – Updated: 2024-08-03 00:10
VLAI
EPSS
VEX
Title
Buffer Over-read in bfabiszewski/libmobi
Summary
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution.
Severity
6.6 (Medium)
CWE
- CWE-126 - Buffer Over-read
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/ea… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:10:03.020Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-126",
"description": "CWE-126 Buffer Over-read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-04-29T10:15:20.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f"
}
],
"source": {
"advisory": "cb574ce1-fbf7-42ea-9e6a-91e17adecdc3",
"discovery": "EXTERNAL"
},
"title": "Buffer Over-read in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1533",
"STATE": "PUBLIC",
"TITLE": "Buffer Over-read in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-126 Buffer Over-read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f"
}
]
},
"source": {
"advisory": "cb574ce1-fbf7-42ea-9e6a-91e17adecdc3",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1533",
"datePublished": "2022-04-29T10:15:20.000Z",
"dateReserved": "2022-04-29T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:10:03.020Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-3889 (GCVE-0-2021-3889)
Vulnerability from nvd – Published: 2021-10-19 12:30 – Updated: 2024-08-03 17:09
VLAI
EPSS
VEX
Title
Use of Out-of-range Pointer Offset in bfabiszewski/libmobi
Summary
libmobi is vulnerable to Use of Out-of-range Pointer Offset
Severity
7.1 (High)
CWE
- CWE-823 - Use of Out-of-range Pointer Offset
References
2 references
| URL | Tags |
|---|---|
| https://github.com/bfabiszewski/libmobi/commit/be… | x_refsource_MISC |
| https://huntr.dev/bounties/efb3e261-3f7d-4a45-811… | x_refsource_CONFIRM |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.8
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:09:09.609Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/efb3e261-3f7d-4a45-8114-e0ace6b21516"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.8",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libmobi is vulnerable to Use of Out-of-range Pointer Offset"
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-823",
"description": "CWE-823 Use of Out-of-range Pointer Offset",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-10-19T12:30:38.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/efb3e261-3f7d-4a45-8114-e0ace6b21516"
}
],
"source": {
"advisory": "efb3e261-3f7d-4a45-8114-e0ace6b21516",
"discovery": "EXTERNAL"
},
"title": "Use of Out-of-range Pointer Offset in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2021-3889",
"STATE": "PUBLIC",
"TITLE": "Use of Out-of-range Pointer Offset in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.8"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libmobi is vulnerable to Use of Out-of-range Pointer Offset"
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-823 Use of Out-of-range Pointer Offset"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
},
{
"name": "https://huntr.dev/bounties/efb3e261-3f7d-4a45-8114-e0ace6b21516",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/efb3e261-3f7d-4a45-8114-e0ace6b21516"
}
]
},
"source": {
"advisory": "efb3e261-3f7d-4a45-8114-e0ace6b21516",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2021-3889",
"datePublished": "2021-10-19T12:30:38.000Z",
"dateReserved": "2021-10-15T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:09:09.609Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-3888 (GCVE-0-2021-3888)
Vulnerability from nvd – Published: 2021-10-19 12:30 – Updated: 2024-08-03 17:09
VLAI
EPSS
VEX
Title
Use of Out-of-range Pointer Offset in bfabiszewski/libmobi
Summary
libmobi is vulnerable to Use of Out-of-range Pointer Offset
Severity
7.1 (High)
CWE
- CWE-823 - Use of Out-of-range Pointer Offset
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/722b3acb-792b-4429-a98… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/c7… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.8
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:09:09.585Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/722b3acb-792b-4429-a98d-bb80efb8938d"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/c78e186739b50d156cb3da5d08d70294f0490853"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.8",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libmobi is vulnerable to Use of Out-of-range Pointer Offset"
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-823",
"description": "CWE-823 Use of Out-of-range Pointer Offset",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-10-19T12:30:37.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/722b3acb-792b-4429-a98d-bb80efb8938d"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/c78e186739b50d156cb3da5d08d70294f0490853"
}
],
"source": {
"advisory": "722b3acb-792b-4429-a98d-bb80efb8938d",
"discovery": "EXTERNAL"
},
"title": "Use of Out-of-range Pointer Offset in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2021-3888",
"STATE": "PUBLIC",
"TITLE": "Use of Out-of-range Pointer Offset in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.8"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libmobi is vulnerable to Use of Out-of-range Pointer Offset"
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-823 Use of Out-of-range Pointer Offset"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/722b3acb-792b-4429-a98d-bb80efb8938d",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/722b3acb-792b-4429-a98d-bb80efb8938d"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/c78e186739b50d156cb3da5d08d70294f0490853",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/c78e186739b50d156cb3da5d08d70294f0490853"
}
]
},
"source": {
"advisory": "722b3acb-792b-4429-a98d-bb80efb8938d",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2021-3888",
"datePublished": "2021-10-19T12:30:37.000Z",
"dateReserved": "2021-10-15T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:09:09.585Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-3881 (GCVE-0-2021-3881)
Vulnerability from nvd – Published: 2021-10-15 13:40 – Updated: 2024-08-03 17:09
VLAI
EPSS
VEX
Title
Out-of-bounds Read in bfabiszewski/libmobi
Summary
libmobi is vulnerable to Out-of-bounds Read
Severity
7.1 (High)
CWE
- CWE-125 - Out-of-bounds Read
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/540fd115-7de4-4e19-a91… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/be… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , ≤ 0.7
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:09:09.571Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/540fd115-7de4-4e19-a918-5ee61f5157c1"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThanOrEqual": "0.7",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libmobi is vulnerable to Out-of-bounds Read"
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-10-15T13:40:23.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/540fd115-7de4-4e19-a918-5ee61f5157c1"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
}
],
"source": {
"advisory": "540fd115-7de4-4e19-a918-5ee61f5157c1",
"discovery": "EXTERNAL"
},
"title": "Out-of-bounds Read in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2021-3881",
"STATE": "PUBLIC",
"TITLE": "Out-of-bounds Read in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c=",
"version_value": "0.7"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libmobi is vulnerable to Out-of-bounds Read"
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-125 Out-of-bounds Read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/540fd115-7de4-4e19-a918-5ee61f5157c1",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/540fd115-7de4-4e19-a918-5ee61f5157c1"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
}
]
},
"source": {
"advisory": "540fd115-7de4-4e19-a918-5ee61f5157c1",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2021-3881",
"datePublished": "2021-10-15T13:40:23.000Z",
"dateReserved": "2021-10-12T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:09:09.571Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-3751 (GCVE-0-2021-3751)
Vulnerability from nvd – Published: 2021-09-15 06:40 – Updated: 2024-08-03 17:09
VLAI
EPSS
VEX
Title
Out-of-bounds Write in bfabiszewski/libmobi
Summary
libmobi is vulnerable to Out-of-bounds Write
Severity
9.6 (Critical)
CWE
- CWE-787 - Out-of-bounds Write
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfc… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/ab… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , ≤ 0.6
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:09:08.310Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThanOrEqual": "0.6",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libmobi is vulnerable to Out-of-bounds Write"
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-09-15T06:40:10.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b"
}
],
"source": {
"advisory": "fcb4383c-bc27-4b89-bfce-6b041f0cb769",
"discovery": "EXTERNAL"
},
"title": "Out-of-bounds Write in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2021-3751",
"STATE": "PUBLIC",
"TITLE": "Out-of-bounds Write in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c=",
"version_value": "0.6"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libmobi is vulnerable to Out-of-bounds Write"
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-787 Out-of-bounds Write"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b"
}
]
},
"source": {
"advisory": "fcb4383c-bc27-4b89-bfce-6b041f0cb769",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2021-3751",
"datePublished": "2021-09-15T06:40:10.000Z",
"dateReserved": "2021-08-31T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:09:08.310Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-2279 (GCVE-0-2022-2279)
Vulnerability from cvelistv5 – Published: 2022-07-01 08:15 – Updated: 2024-08-03 00:32
VLAI
EPSS
VEX
Title
NULL Pointer Dereference in bfabiszewski/libmobi
Summary
NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11.
Severity
6.6 (Medium)
CWE
- CWE-476 - NULL Pointer Dereference
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/68c249e2-779d-4871-b7e… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/c0… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:32:09.597Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/68c249e2-779d-4871-b7e3-851f03aca2de"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/c0699c8693c47f14a2e57dec7292e862ac7adf9c"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476 NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-07-01T08:15:21.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/68c249e2-779d-4871-b7e3-851f03aca2de"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/c0699c8693c47f14a2e57dec7292e862ac7adf9c"
}
],
"source": {
"advisory": "68c249e2-779d-4871-b7e3-851f03aca2de",
"discovery": "EXTERNAL"
},
"title": "NULL Pointer Dereference in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-2279",
"STATE": "PUBLIC",
"TITLE": "NULL Pointer Dereference in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-476 NULL Pointer Dereference"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/68c249e2-779d-4871-b7e3-851f03aca2de",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/68c249e2-779d-4871-b7e3-851f03aca2de"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/c0699c8693c47f14a2e57dec7292e862ac7adf9c",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/c0699c8693c47f14a2e57dec7292e862ac7adf9c"
}
]
},
"source": {
"advisory": "68c249e2-779d-4871-b7e3-851f03aca2de",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-2279",
"datePublished": "2022-07-01T08:15:21.000Z",
"dateReserved": "2022-07-01T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:32:09.597Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1987 (GCVE-0-2022-1987)
Vulnerability from cvelistv5 – Published: 2022-06-03 07:50 – Updated: 2024-08-03 00:24
VLAI
EPSS
VEX
Title
Buffer Over-read in bfabiszewski/libmobi
Summary
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
Severity
CWE
- CWE-126 - Buffer Over-read
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/e8197737-7557-443e-a59… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/61… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:24:43.784Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-126",
"description": "CWE-126 Buffer Over-read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-06-03T07:50:10.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d"
}
],
"source": {
"advisory": "e8197737-7557-443e-a59f-2a86e8dda75f",
"discovery": "EXTERNAL"
},
"title": "Buffer Over-read in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1987",
"STATE": "PUBLIC",
"TITLE": "Buffer Over-read in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-126 Buffer Over-read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d"
}
]
},
"source": {
"advisory": "e8197737-7557-443e-a59f-2a86e8dda75f",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1987",
"datePublished": "2022-06-03T07:50:10.000Z",
"dateReserved": "2022-06-03T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:24:43.784Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1908 (GCVE-0-2022-1908)
Vulnerability from cvelistv5 – Published: 2022-05-27 08:35 – Updated: 2024-08-03 00:17
VLAI
EPSS
VEX
Title
Buffer Over-read in bfabiszewski/libmobi
Summary
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
Severity
CWE
- CWE-126 - Buffer Over-read
References
2 references
| URL | Tags |
|---|---|
| https://github.com/bfabiszewski/libmobi/commit/1e… | x_refsource_MISC |
| https://huntr.dev/bounties/a7436e88-0488-4bd4-816… | x_refsource_CONFIRM |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:17:00.944Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.6,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-126",
"description": "CWE-126 Buffer Over-read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-27T08:35:16.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8"
}
],
"source": {
"advisory": "a7436e88-0488-4bd4-816f-2e2c803e93e8",
"discovery": "EXTERNAL"
},
"title": "Buffer Over-read in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1908",
"STATE": "PUBLIC",
"TITLE": "Buffer Over-read in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.6,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-126 Buffer Over-read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
},
{
"name": "https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8"
}
]
},
"source": {
"advisory": "a7436e88-0488-4bd4-816f-2e2c803e93e8",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1908",
"datePublished": "2022-05-27T08:35:16.000Z",
"dateReserved": "2022-05-27T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:17:00.944Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1907 (GCVE-0-2022-1907)
Vulnerability from cvelistv5 – Published: 2022-05-27 08:30 – Updated: 2024-08-03 00:17
VLAI
EPSS
VEX
Title
Buffer Over-read in bfabiszewski/libmobi
Summary
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
Severity
CWE
- CWE-126 - Buffer Over-read
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/1e… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:17:00.917Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.6,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-126",
"description": "CWE-126 Buffer Over-read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-27T08:30:13.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
}
],
"source": {
"advisory": "4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012",
"discovery": "EXTERNAL"
},
"title": "Buffer Over-read in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1907",
"STATE": "PUBLIC",
"TITLE": "Buffer Over-read in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.6,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-126 Buffer Over-read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba"
}
]
},
"source": {
"advisory": "4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1907",
"datePublished": "2022-05-27T08:30:13.000Z",
"dateReserved": "2022-05-27T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:17:00.917Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1533 (GCVE-0-2022-1533)
Vulnerability from cvelistv5 – Published: 2022-04-29 10:15 – Updated: 2024-08-03 00:10
VLAI
EPSS
VEX
Title
Buffer Over-read in bfabiszewski/libmobi
Summary
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution.
Severity
6.6 (Medium)
CWE
- CWE-126 - Buffer Over-read
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/ea… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:10:03.020Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-126",
"description": "CWE-126 Buffer Over-read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-04-29T10:15:20.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f"
}
],
"source": {
"advisory": "cb574ce1-fbf7-42ea-9e6a-91e17adecdc3",
"discovery": "EXTERNAL"
},
"title": "Buffer Over-read in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1533",
"STATE": "PUBLIC",
"TITLE": "Buffer Over-read in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-126 Buffer Over-read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f"
}
]
},
"source": {
"advisory": "cb574ce1-fbf7-42ea-9e6a-91e17adecdc3",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1533",
"datePublished": "2022-04-29T10:15:20.000Z",
"dateReserved": "2022-04-29T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:10:03.020Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-1534 (GCVE-0-2022-1534)
Vulnerability from cvelistv5 – Published: 2022-04-29 10:15 – Updated: 2024-08-03 00:10
VLAI
EPSS
VEX
Title
Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi
Summary
Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
Severity
6.6 (Medium)
CWE
- CWE-126 - Buffer Over-read
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c0… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/fb… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.11
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T00:10:02.994Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c00-68ba9068ce3d"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.11",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-126",
"description": "CWE-126 Buffer Over-read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-04-29T10:15:14.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c00-68ba9068ce3d"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b"
}
],
"source": {
"advisory": "9a90ffa1-38f5-4685-9c00-68ba9068ce3d",
"discovery": "EXTERNAL"
},
"title": "Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2022-1534",
"STATE": "PUBLIC",
"TITLE": "Buffer Over-read at parse_rawml.c:1416 in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.11"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-126 Buffer Over-read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c00-68ba9068ce3d",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/9a90ffa1-38f5-4685-9c00-68ba9068ce3d"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/fb1ab50e448ddbed746fd27ae07469bc506d838b"
}
]
},
"source": {
"advisory": "9a90ffa1-38f5-4685-9c00-68ba9068ce3d",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2022-1534",
"datePublished": "2022-04-29T10:15:14.000Z",
"dateReserved": "2022-04-29T00:00:00.000Z",
"dateUpdated": "2024-08-03T00:10:02.994Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-3889 (GCVE-0-2021-3889)
Vulnerability from cvelistv5 – Published: 2021-10-19 12:30 – Updated: 2024-08-03 17:09
VLAI
EPSS
VEX
Title
Use of Out-of-range Pointer Offset in bfabiszewski/libmobi
Summary
libmobi is vulnerable to Use of Out-of-range Pointer Offset
Severity
7.1 (High)
CWE
- CWE-823 - Use of Out-of-range Pointer Offset
References
2 references
| URL | Tags |
|---|---|
| https://github.com/bfabiszewski/libmobi/commit/be… | x_refsource_MISC |
| https://huntr.dev/bounties/efb3e261-3f7d-4a45-811… | x_refsource_CONFIRM |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.8
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:09:09.609Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/efb3e261-3f7d-4a45-8114-e0ace6b21516"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.8",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libmobi is vulnerable to Use of Out-of-range Pointer Offset"
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-823",
"description": "CWE-823 Use of Out-of-range Pointer Offset",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-10-19T12:30:38.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/efb3e261-3f7d-4a45-8114-e0ace6b21516"
}
],
"source": {
"advisory": "efb3e261-3f7d-4a45-8114-e0ace6b21516",
"discovery": "EXTERNAL"
},
"title": "Use of Out-of-range Pointer Offset in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2021-3889",
"STATE": "PUBLIC",
"TITLE": "Use of Out-of-range Pointer Offset in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.8"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libmobi is vulnerable to Use of Out-of-range Pointer Offset"
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-823 Use of Out-of-range Pointer Offset"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
},
{
"name": "https://huntr.dev/bounties/efb3e261-3f7d-4a45-8114-e0ace6b21516",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/efb3e261-3f7d-4a45-8114-e0ace6b21516"
}
]
},
"source": {
"advisory": "efb3e261-3f7d-4a45-8114-e0ace6b21516",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2021-3889",
"datePublished": "2021-10-19T12:30:38.000Z",
"dateReserved": "2021-10-15T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:09:09.609Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-3888 (GCVE-0-2021-3888)
Vulnerability from cvelistv5 – Published: 2021-10-19 12:30 – Updated: 2024-08-03 17:09
VLAI
EPSS
VEX
Title
Use of Out-of-range Pointer Offset in bfabiszewski/libmobi
Summary
libmobi is vulnerable to Use of Out-of-range Pointer Offset
Severity
7.1 (High)
CWE
- CWE-823 - Use of Out-of-range Pointer Offset
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/722b3acb-792b-4429-a98… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/c7… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , < 0.8
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:09:09.585Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/722b3acb-792b-4429-a98d-bb80efb8938d"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/c78e186739b50d156cb3da5d08d70294f0490853"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThan": "0.8",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libmobi is vulnerable to Use of Out-of-range Pointer Offset"
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-823",
"description": "CWE-823 Use of Out-of-range Pointer Offset",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-10-19T12:30:37.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/722b3acb-792b-4429-a98d-bb80efb8938d"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/c78e186739b50d156cb3da5d08d70294f0490853"
}
],
"source": {
"advisory": "722b3acb-792b-4429-a98d-bb80efb8938d",
"discovery": "EXTERNAL"
},
"title": "Use of Out-of-range Pointer Offset in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2021-3888",
"STATE": "PUBLIC",
"TITLE": "Use of Out-of-range Pointer Offset in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "0.8"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libmobi is vulnerable to Use of Out-of-range Pointer Offset"
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-823 Use of Out-of-range Pointer Offset"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/722b3acb-792b-4429-a98d-bb80efb8938d",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/722b3acb-792b-4429-a98d-bb80efb8938d"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/c78e186739b50d156cb3da5d08d70294f0490853",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/c78e186739b50d156cb3da5d08d70294f0490853"
}
]
},
"source": {
"advisory": "722b3acb-792b-4429-a98d-bb80efb8938d",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2021-3888",
"datePublished": "2021-10-19T12:30:37.000Z",
"dateReserved": "2021-10-15T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:09:09.585Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-3881 (GCVE-0-2021-3881)
Vulnerability from cvelistv5 – Published: 2021-10-15 13:40 – Updated: 2024-08-03 17:09
VLAI
EPSS
VEX
Title
Out-of-bounds Read in bfabiszewski/libmobi
Summary
libmobi is vulnerable to Out-of-bounds Read
Severity
7.1 (High)
CWE
- CWE-125 - Out-of-bounds Read
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/540fd115-7de4-4e19-a91… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/be… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , ≤ 0.7
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:09:09.571Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/540fd115-7de4-4e19-a918-5ee61f5157c1"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThanOrEqual": "0.7",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libmobi is vulnerable to Out-of-bounds Read"
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-10-15T13:40:23.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/540fd115-7de4-4e19-a918-5ee61f5157c1"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
}
],
"source": {
"advisory": "540fd115-7de4-4e19-a918-5ee61f5157c1",
"discovery": "EXTERNAL"
},
"title": "Out-of-bounds Read in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2021-3881",
"STATE": "PUBLIC",
"TITLE": "Out-of-bounds Read in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c=",
"version_value": "0.7"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libmobi is vulnerable to Out-of-bounds Read"
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-125 Out-of-bounds Read"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/540fd115-7de4-4e19-a918-5ee61f5157c1",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/540fd115-7de4-4e19-a918-5ee61f5157c1"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21"
}
]
},
"source": {
"advisory": "540fd115-7de4-4e19-a918-5ee61f5157c1",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2021-3881",
"datePublished": "2021-10-15T13:40:23.000Z",
"dateReserved": "2021-10-12T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:09:09.571Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-3751 (GCVE-0-2021-3751)
Vulnerability from cvelistv5 – Published: 2021-09-15 06:40 – Updated: 2024-08-03 17:09
VLAI
EPSS
VEX
Title
Out-of-bounds Write in bfabiszewski/libmobi
Summary
libmobi is vulnerable to Out-of-bounds Write
Severity
9.6 (Critical)
CWE
- CWE-787 - Out-of-bounds Write
References
2 references
| URL | Tags |
|---|---|
| https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfc… | x_refsource_CONFIRM |
| https://github.com/bfabiszewski/libmobi/commit/ab… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| bfabiszewski | bfabiszewski/libmobi |
Affected:
unspecified , ≤ 0.6
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:09:08.310Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "bfabiszewski/libmobi",
"vendor": "bfabiszewski",
"versions": [
{
"lessThanOrEqual": "0.6",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libmobi is vulnerable to Out-of-bounds Write"
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-09-15T06:40:10.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b"
}
],
"source": {
"advisory": "fcb4383c-bc27-4b89-bfce-6b041f0cb769",
"discovery": "EXTERNAL"
},
"title": "Out-of-bounds Write in bfabiszewski/libmobi",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@huntr.dev",
"ID": "CVE-2021-3751",
"STATE": "PUBLIC",
"TITLE": "Out-of-bounds Write in bfabiszewski/libmobi"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "bfabiszewski/libmobi",
"version": {
"version_data": [
{
"version_affected": "\u003c=",
"version_value": "0.6"
}
]
}
}
]
},
"vendor_name": "bfabiszewski"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "libmobi is vulnerable to Out-of-bounds Write"
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-787 Out-of-bounds Write"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769",
"refsource": "CONFIRM",
"url": "https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769"
},
{
"name": "https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b",
"refsource": "MISC",
"url": "https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b"
}
]
},
"source": {
"advisory": "fcb4383c-bc27-4b89-bfce-6b041f0cb769",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2021-3751",
"datePublished": "2021-09-15T06:40:10.000Z",
"dateReserved": "2021-08-31T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:09:08.310Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}