{"id":"CVE-2022-1533","summary":"Buffer Over-read in bfabiszewski/libmobi","details":"Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution.","modified":"2026-08-12T12:59:24.563654Z","published":"2022-04-29T10:15:20Z","database_specific":{"cwe_ids":["CWE-126"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1533.json","cna_assigner":"@huntrdev"},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/cb574ce1-fbf7-42ea-9e6a-91e17adecdc3"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1533.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1533"},{"type":"FIX","url":"https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bfabiszewski/libmobi","events":[{"introduced":"0"},{"fixed":"864e3a86f2565b650f203ec6b1fddc4fb16df925"},{"fixed":"eafc415bc6067e72577f70d6dd5acbf057ce6e6f"}],"database_specific":{"cpe":"cpe:2.3:a:libmobi_project:libmobi:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"0.11"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v0.10","v0.9","v0.8","v0.7","v0.6","v0.5","v0.4","v0.3","v0.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1533.json","vanir_signatures_modified":"2026-08-12T12:59:24Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f","target":{"file":"src/index.c","function":"mobi_decode_infl"},"deprecated":false,"digest":{"function_hash":"122311351345898460096319054381710166555","length":1567},"id":"CVE-2022-1533-2310d286","signature_type":"Function"},{"target":{"file":"src/index.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["201118122064676363142446535113983819594","87436802226906233145654406307843371457","13581302182000898971576334756061663034","86093594006605435466743802160218329017","49605341440843141815436283974438999494","307354495754942199530176251026328152469","315720768860380620824891968980988384923","135314417989447218802808981901982586440","165036968090404426984065489494102444537","264799292368057183464503966694585568284","315277851698387910945624461434560972003","299080527105624919208413240791701787718","57117097952095305987340190820676073724","159900986793963422711740919346394111081","253834477077690486714628611013298254725","152376241480364731877026783329481017380","57117097952095305987340190820676073724","159900986793963422711740919346394111081"]},"id":"CVE-2022-1533-86ee8d29","signature_type":"Line","signature_version":"v1","source":"https://github.com/bfabiszewski/libmobi/commit/eafc415bc6067e72577f70d6dd5acbf057ce6e6f"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"}]}