CVE-2022-1534 Vulnerability Details

  /     /     /  

CVE-2022-1534 Metadata Quick Info

CVE Published: 29/04/2022 | CVE Updated: 03/08/2024 | CVE Year: 2022
Source: @huntrdev | Vendor: bfabiszewski | Product: bfabiszewski/libmobi
Status : PUBLISHED

---

CVE-2022-1534 Description

Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-126
CWE Name: CWE-126 Buffer Over-read
Source: bfabiszewski

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).