CVE-2018-11724

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3

Description The issue is related to a heap-based buffer overflow in the mobi pk1 decrypt function, which can be triggered by a crafted mobi file. This can cause a denial of service or possibly have other unspecified impacts.

Recommendations For Libmobi version 0.3, consider avoiding the use of the mobi pk1 decrypt function until a patch is available. As a temporary workaround, restrict the processing of mobi files from untrusted sources to minimize the risk of exploitation.