What’s Vulnerable › Vulnerabilities

CVE-2024-6781: Calibre Arbitrary File Read

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 62.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-08-06 · updated 2026-06-17
• Weakness: CWE-22

Description

Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read.

Affected products

• kovidgoyal calibre: through 7.14.0

References

• https://github.com/kovidgoyal/calibre/commit/bcd0ab12c41a887f8290a9b56e46c3a29038d9c4
• https://starlabs.sg/advisories/24/24-6781/

Get alerted when CVE-2024-6781 or the next vulnerability affects your stack