CVE-2018-11725: Libmobi Project Libmobi

Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted mobi file.

Affected products

• Libmobi Project Libmobi: version 0.3 only

Published 2018-06-19. Last modified 2026-06-17.