Libmobi CVE-2021-3888

HIGH

Use of Out-of-range Pointer Offset (CWE-823)

2021-10-19 security@huntr.dev

Memory Corruption Information Disclosure Libmobi

8.1

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

1

CVE Published

Oct 19, 2021 - 13:15 nvd

HIGH 8.1

DescriptionNVD

libmobi is vulnerable to Use of Out-of-range Pointer Offset

AnalysisAI

libmobi is vulnerable to Use of Out-of-range Pointer Offset. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-823. Affected products include: Libmobi Project Libmobi.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Libmobi

View all

CVE-2021-3881 CRITICAL Act Now POC

libmobi is vulnerable to Out-of-bounds Read. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploita

CVE-2021-3751 CRITICAL Act Now POC

libmobi is vulnerable to Out-of-bounds Write. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploit

CVE-2018-11438 HIGH This Week POC

The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution

CVE-2022-1987 HIGH This Week POC

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. Rated high severity (CVSS 8.1), this vulnerabi

CVE-2022-1908 HIGH This Week POC

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. Rated high severity (CVSS 8.1), this vulnerabi

CVE-2022-1907 HIGH This Week POC

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. Rated high severity (CVSS 8.1), this vulnerabi

CVE-2021-3889 HIGH This Week POC

libmobi is vulnerable to Use of Out-of-range Pointer Offset. Rated high severity (CVSS 8.1), this vulnerability is remot

CVE-2022-1533 HIGH This Week POC

Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. Rated high severity (CVSS 7.8), this vulnerabi

CVE-2022-1534 HIGH This Week POC

Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. Rated high severity (CVS

CVE-2018-11437 MEDIUM This Month POC

The mobi_reconstruct_parts function in parse_rawml.c in Libmobi 0.3 allows remote attackers to cause information disclos

CVE-2018-11436 MEDIUM This Month POC

The buffer_addraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-base

CVE-2018-11435 MEDIUM This Month POC

The mobi_decompress_huffman_internal function in compression.c in Libmobi 0.3 allows remote attackers to cause informati

Same weakness CWE-823 – Use of Out-of-range Pointer Offset

View all

CVE-2016-2161 HIGH

CVE-2022-0729 HIGH POC

CVE-2026-41907 HIGH POC

CVE-2021-3889 HIGH POC

CVE-2022-0685 HIGH POC

CVE-2020-6112 HIGH POC

CVE-2024-42383 CRITICAL

CVE-2023-22388 CRITICAL

Same technique Memory Corruption

View all

CVE-2015-5119 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2011-0611 HIGH POC

CVE-2014-0322 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2012-4792 HIGH POC

CVE-2010-3333 HIGH POC

Share

CVE-2021-3888 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy