{"id":6989,"date":"2025-06-17T10:24:46","date_gmt":"2025-06-17T10:24:46","guid":{"rendered":"http:\/\/localhost\/?p=6989"},"modified":"2025-06-17T10:24:46","modified_gmt":"2025-06-17T10:24:46","slug":"libgepub-integer-overflow-in-libgepubs-epub-archive-handling","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=6989","title":{"rendered":"Libgepub: integer overflow in libgepub’s epub archive handling"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nLibgepub: integer overflow in libgepub’s epub archive handling<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-17T14:29:42.228Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nRed Hat<\/td>\n<\/tr>\n
Product<\/th>\nRed Hat Enterprise Linux 7<\/td>\n<\/tr>\n
Version<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n5.5 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:R\/S:U\/C:N\/I:N\/A:H<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA vulnerability in libgepub allows attackers to cause a denial of service by crashing applications that use the library to process specially crafted EPUB files. This affects software like Tumbler when handling malicious files in directories. While no direct remote attacks are confirmed, any application using libgepub for user-supplied content is at risk.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nGNOME Foundation<\/td>\n<\/tr>\n
Product<\/th>\nlibgepub<\/td>\n<\/tr>\n
Affected Version<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Additional Information<\/h3>\n\n\n\n\n
CVE List<\/th>\n<\/td>\n<\/tr>\n
CWE List<\/th>\nCWE-190<\/td>\n<\/tr>\n
Bulletin Family<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

References<\/h4>\n