Ubi Reader Project develops a focused utility for parsing UBI (Unsorted Block Images) filesystem structures, a component commonly found in embedded systems and firmware analysis workflows. The vendor's observed vulnerability profile centers on path-traversal weaknesses in its core product, reflecting the directory-traversal risks inherent to filesystem parsing logic that processes untrusted or semi-trusted image data. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Ubi Reader Project over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-4572HIGH A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files of the file ubireader | Dec 17, 2022 | 7.1 | 23 | NO | NO |
CVE-2023-0591MEDIUM
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction direc | Jan 31, 2023 | 5.5 | 20 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Ubi Reader Project.
Media articles that mention a CVE ID that affects a product developed by Ubi Reader Project — matched by CVE ID, not by vendor name.