435 matches found
Heap overflow
Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiDecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
Heap overflow
Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiIncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
Heap overflow
Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...
Heap overflow
Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiObjFree in src/jsiObj.c. This vulnerability can lead to a Denial of Service DoS...
Heap overflow
Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c. This vulnerability can lead to a Denial of Service DoS...
Design/Logic Flaw
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
Authentication flaw
There is an Assertion 'vp != resPtr' failed at jsiEval.c in Jsish v3.5.0...
Design/Logic Flaw
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiFunctionInvoke at src/jsiFunc.c. This vulnerability can lead to a Denial of Service DoS...
Code injection
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service DoS...
Stack overflow
Jsish v3.5.0 was discovered to contain a stack overflow via JsiLogMsg at src/jsiUtils.c...
Design/Logic Flaw
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46507
Jsish v3.5.0 was discovered to contain a stack overflow via JsiLogMsg at src/jsiUtils.c...
CVE-2021-46507
Jsish 3.5.0 contains a stack overflow in the Jsi_LogMsg pathway (src/jsiUtils.c). The vulnerability, identified as CVE-2021-46507, is triggered via the Jsi_LogMsg function and may lead to a denial of service with high impact on availability. Affected software/component: Jsish v3.5.0; vulnerable f...
CVE-2021-46506
CVE-2021-46506 affects Jsish v3.5.0. The issue stems from an assertion failure in jsiValue.c (v->d.lval != v), which is described in the CVE description as a failure in Jsish v3.5.0. Several connected sources label the vulnerability as enabling a denial of service (DoS). The available document...
CVE-2021-46506
There is an Assertion 'v-d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0...
CVE-2021-46505
CVE-2021-46505 affects Jsish v3.5.0. The vulnerability is a stack overflow triggered via the library path /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5b1e5. Affected component: Jsish (C code). Root cause: stack overflow in the parser/engine leading to potential crash. Impact: as described in connect...
CVE-2021-46505
Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x8664-linux-gnu/libasan.so.4+0x5b1e5...
CVE-2021-46504
CVE-2021-46504 affects Jsish v3.5.0. The vulnerability is an assertion failure (vp != resPtr) in jsiEval.c that can lead to a denial of service. Related documents explicitly reference DoS and Jsish v3.5.0, with CVSS data indicating local access and possible high impact on availability (CVE metric...