CVE-2018-11433: The mobi_get_kf8boundary_seqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause infor...

Security readout for executives and security teams

CVE-2018-11433 affects Libmobi 0.3, a library for MOBI ebook parsing. A malicious MOBI file can trigger a heap-based buffer over-read, potentially exposing memory from the parsing process. Business risk depends on whether the organization processes untrusted MOBI files. Exposure is most likely in applications, services, converters, readers, or document pipelines that use Libmobi 0.3 and parse MOBI files from users, email, uploads, or external sources. Treat this as a targeted document-parsing exposure rather than an enterprise-wide emergency unless MOBI files are accepted from untrusted parties. Prioritize affected ingestion and conversion services first. Mitigation focus: Inventory systems and applications using Libmobi 0.3.; Check Libmobi or application vendor guidance for fixed versions or recommended mitigations.; Avoid parsing untrusted MOBI files with affected components until guidance is applied..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.