CVE-2018-11434: The buffer_fill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information dis...

Security readout for executives and security teams

CVE-2018-11434 is a memory read flaw in Libmobi 0.3. A specially crafted MOBI file can make the library read beyond a heap buffer, potentially exposing data from process memory. Business urgency depends on whether systems parse untrusted MOBI files. Exposure is most likely in applications, conversion services, indexing pipelines, or forensic workflows that use Libmobi 0.3 to process externally supplied MOBI files. The provided affected-product data is incomplete. Treat as targeted remediation if Libmobi 0.3 handles external files. Without confirmed exposure, CVSS, or exploitation evidence, this is not enough for emergency prioritization. Mitigation focus: Identify applications, services, or tools using Libmobi 0.3.; Avoid processing untrusted MOBI files with Libmobi 0.3 until guidance is confirmed.; Check Libmobi advisory history for fixed versions or maintained alternatives..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.