CVE-2018-11438: Libmobi Project Libmobi

High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days.

The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer overflow) via a crafted mobi file.

Affected products

• Libmobi Project Libmobi: version 0.3 only

Published 2018-05-30. Last modified 2026-06-17.