CVE-2021-33797

2023-04-1700:00:00

CWE-119

fedora

www.cve.org

artifex mujs

buffer-overflow

integer overflow

floating point

exponent

pointer

AI Score

9.9

Confidence

High

EPSS

0.001

Percentile

44.5%

JSON

Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "mujs",
    "versions": [
      {
        "version": "mujs in versions 1.0.1 to 1.1.1",
        "status": "affected"
      }
    ]
  }
]