Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2022-08203)

Moddable SDK is a software development kit (SDK) for IoT embedded software development from Moddable USA. v11.5.0 of the Moddable SDK is vulnerable to a heap buffer overflow vulnerability that stems from a boundary error in the __asan_memcpy component when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system.