CVE-2018-11726

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3

Description The issue allows remote attackers to cause a denial of service or possibly have other impact via a crafted mobi file. This is due to a heap-based buffer overflow in the mobi decode font resource function in util.c.

Recommendations For Libmobi version 0.3, consider updating to a newer version that addresses this issue, as the current version allows for a heap-based buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.