584 matches found
CVE-2021-46520
CVE-2021-46520 involves Cesanta MJS v2.20.0, which has a heap buffer overflow in the function mjs_jprintf located in src/mjs_util.c . The connected sources confirm the vulnerable component and location but do not provide further exploit details or remediation. The impact is described as a heap ov...
CVE-2021-46521
CVE-2021-46521 affects Cesanta MJS v2.20.0; a global buffer overflow is triggered via c_vsnprintf in mjs/src/common/str_util.c. Public disclosures in NVD/CNVD indicate a buffer overflow vulnerability; no exploit details or patches are provided in the connected documents. Impact and remediation ar...
CVE-2021-46520
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsjprintf at src/mjsutil.c...
CVE-2021-46519
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsarraylength at src/mjsarray.c...
CVE-2021-46518
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsdisown at src/mjscore.c...
CVE-2021-46517
There is an Assertion mjsstacksize&mjs-scopes 0' failed at src/mjsexec.c in Cesanta MJS v2.20.0...
CVE-2021-46516
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsstacksize at mjs/src/mjscore.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46515
There is an Assertion mjsstacksize&mjs-scopes = scopeslen' failed at src/mjsexec.c in Cesanta MJS v2.20.0...
CVE-2021-46514
CVE-2021-46514 affects Cesanta MJS v2.20.0. The issue arises from the assertion failure “ppos != NULL && mjs_is_number(*ppos)” in src/mjs_core.c, which can lead to a denial of service. Connected records corroborate the same root cause and version, indicating a vulnerability in the embedded JavaSc...
CVE-2021-46513
CVE-2021-46513 affects Cesanta MJS v2.20.0, with a vulnerability in the mjs_string.c implementation (mjs_mk_string) that results in a global buffer overflow. The affected component is the embedded JavaScript engine (Cesanta MJS). Root cause specifics described in sources: a buffer overflow in the...
CVE-2021-46513
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjsmkstring at mjs/src/mjsstring.c...
CVE-2021-46514
There is an Assertion 'ppos != NULL && mjsisnumberppos' failed at src/mjscore.c in Cesanta MJS v2.20.0...
CVE-2021-46512
CVE-2021-46512 affects Cesanta MJS v2.20.0. A SEGV vulnerability is triggered via mjs_apply in src/mjs_exec.c, leading to Denial of Service. The provided documents confirm the affected software/component and the root cause (segmentation fault in the mjs_apply path). Publicly disclosed details des...
CVE-2021-46512
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsapply at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46511
There is an Assertion m-len = sizeofv' failed at src/mjscore.c in Cesanta MJS v2.20.0...
CVE-2021-46510
There is an Assertion s ownedstrings.buf + mjs-ownedstrings.len' failed at src/mjsgc.c in Cesanta MJS v2.20.0...
CVE-2021-46511
The CVE refers to Cesanta MJS (embedded JavaScript engine) v2.20.0 where an assertion in mjs_core.c (m->len >= sizeof(v)) can be triggered, leading to a denial of service. Public details consistently describe a DoS impact but do not document a specific vulnerable component beyond mjs_core.c...
CVE-2021-46510
The CVE-2021-46510 issue affects Cesanta MJS, an embedded JavaScript engine for C/C++. The vulnerability originates from an assertion in src/mjs_gc.c (s owned_strings.buf + mjs->owned_strings.len) in Cesanta MJS v2.20.0, which can lead to denial of service. Related sources (CNVD/CNNVD, OSV/NVD...
CVE-2021-46509
Cesanta MJS 2.20.0 contains a stack overflow in the snquote function (mjs/src/mjs_json.c). PT-2022-12754 documents this issue and notes a temporary workaround: restrict access to the snquote function until a patch is available; no patched version is identified in the provided documents.