Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2021-90315)

Moddable SDK is a software development kit (SDK) for IoT embedded software development from Moddable, Inc. A buffer error vulnerability exists in Moddable SDK v10.5.0, which originates in the fx_ String_prototype_repeat function in the /moddable/xs/sources/xsString.c file is vulnerable to a heap-based buffer overflow. No detailed vulnerability details are available at this time.