CVE-2022-1908
libmobi: Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
CVE-2022-1908 is fixed in 3 products on 1 platform, first by DEBIAN-CVE-2022-1908, released May 27, 2022. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
8.1
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0071
53rd percentile
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libmobi · Debian 12.15 (bookworm) | 0.11+dfsg-1 | DEBIAN-CVE-2022-1908 | May 27, 2022 |
| libmobi · Debian 13.5 (trixie) | 0.11+dfsg-1 | DEBIAN-CVE-2022-1908 | May 27, 2022 |
| libmobi · Debian 14 | 0.11+dfsg-1 | DEBIAN-CVE-2022-1908 | May 27, 2022 |
| libmobi-tools · Ubuntu 22.04.1 LTS (jammy) | 0.9+dfsg1-1ubuntu0.1~esm1 | libmobi-tools 0.9+dfsg1-1ubuntu0.1~esm1 | Jun 2, 2022 |
| libmobi0 · Ubuntu 22.04.1 LTS (jammy) | 0.9+dfsg1-1ubuntu0.1~esm1 | libmobi0 0.9+dfsg1-1ubuntu0.1~esm1 | Jun 2, 2022 |