5844 matches found
Facebook Hermes security vulnerability
Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client application apps, but not for server-side infrastructures such as browsers & Node.js. A security vulnerability exists in...
PT-2022-5310
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 107.0.5304.62 Microsoft Edge affected versions not specified Description The issue is related to type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via ...
PT-2022-5051
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 106.0.5249.91 Microsoft Edge affected versions not specified Description The issue is related to an out of bounds write in the V8 JavaScript engine, allowing a remote attacker to perform an out of bounds memory...
PT-2022-4578
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 105.0.5195.52 Microsoft Edge affected versions not specified Description The issue is related to insufficient validation of untrusted input in the V8 JavaScript engine, which can be exploited by a remote attacke...
CVE-2022-38475
An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox 104...
PT-2022-4570
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 104 Firefox ESR versions prior to 91.13 and prior to 102.2 Thunderbird versions prior to 91.13 and prior to 102.2 Description The issue is related to a memory safety bug that can lead to memory corruption, potentially...
quickjs:fuzz_eval: Heap-buffer-overflow in find_jump_target
Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5677202523422720 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzeval Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type:...
DEBIAN-CVE-2022-2158
Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-36320
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 103...
CVE-2022-2205
Unknown description...
UBUNTU-CVE-2022-1486
Type confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
CVE-2021-33449
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is NULL pointer dereference in mjsbcodepartgetbyoffset in mjs.c...
CVE-2021-33449
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is NULL pointer dereference in mjsbcodepartgetbyoffset in mjs.c...
CVE-2021-33447
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is NULL pointer dereference in mjsprint in mjs.c...
CVE-2021-33448
An issue was discovered in mjsmJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is stack buffer overflow at 0x7fffe9049390...
CVE-2021-33449
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is NULL pointer dereference in mjsbcodepartgetbyoffset in mjs.c...
CVE-2021-33438
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is stack buffer overflow in jsonparsearray in mjs.c...
CVE-2021-33439
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is Integer overflow in gccompactstrings in mjs.c...