In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.
CPE | Name | Operator | Version |
---|---|---|---|
moddable | eq | 180329.0.0-os | |
xs | eq | 9.0.0 |