Vulnerability · Published Oct 19, 2021 · Assigned by @huntrdev

CVE-2021-3888Use of Out-of-range Pointer Offset in bfabiszewski/libmobi

High 7.1

In plain English

A high-severity security flaw in bfabiszewski/libmobi from bfabiszewski. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).

Severity (CVSS 3.0)7.1High
Exploit odds (30 days)1.3%top 29.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

libmobi is vulnerable to Use of Out-of-range Pointer Offset

Affected products (as reported)

VendorProductVersions
bfabiszewski bfabiszewski/libmobi unspecified – before 0.8

Weakness: CWE-823 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

References