CVE-2022-1908: 
Homebrew vulnerability analysis and mitigation

Buffer Over-read vulnerability (CVE-2022-1908) was discovered in GitHub repository bfabiszewski/libmobi prior to version 0.10. The vulnerability was related to a boundary checking error in markup search functionality that could cause buffer over-read with corrupt input (Debian Tracker).

The vulnerability stems from improper boundary checking in the markup search functionality. The issue was specifically located in the parse_rawml.c file where self-closing tag checks could lead to buffer over-read conditions when processing corrupt input. The fix involved adding additional boundary checks to prevent accessing memory outside of allocated buffers (GitHub Commit).

The vulnerability could allow an attacker to cause buffer over-read conditions when processing corrupt input files, potentially leading to information disclosure or application crashes (Debian Tracker).

The vulnerability was fixed in libmobi version 0.10 and later releases. Users should upgrade to the latest version of the software. The fix implements proper boundary checking in the markup search functionality to prevent buffer over-read conditions (GitHub Commit).