300 matches found
CVE-2021-46330
CVE-2021-46330 affects Moddable SDK v11.5.0 with a SEGV vulnerability in xs/sources/xsDataView.c, specifically fx_ArrayBuffer_prototype_concat. This is the root cause described across multiple sources. NVD lists impact as partial availability (CVSSv2) and high impact on availability (CVSSv3) with...
CVE-2021-46330
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...
CVE-2021-46327
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...
CVE-2021-46329
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component fini...
CVE-2021-46328
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component libcstartmain...
CVE-2021-46328
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component libcstartmain...
CVE-2021-46327
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...
CVE-2021-46329
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component fini...
CVE-2021-46327
Moddable SDK v11.5.0 contains a SEGV vulnerability in xsArray.c (fx_Array_prototype_sort). The root cause is a crash in the sort implementation within the XS engine (xs/sources/xsArray.c: fx_Array_prototype_sort). The provided connected documents confirm the affected product and code location but...
CVE-2021-46328
Moddable SDK v11.5.0 is affected by a heap-buffer-overflow vulnerability in the _libc_start_main component when processing untrusted input. The issue, described in CVE-2021-46328 and corroborated by CNVD-2022-08216 and Red Hat/RH advisories, can allow arbitrary code execution, with impact describ...
CVE-2021-46329
Moddable SDK v11.5.0 contains a SEGV vulnerability in the fini/_fini component. Affects the SDK, with impact described as confidentiality/integrity unaffected, availability impact: PARTIAL (CVSS v2) and HIGH (CVSS v3.1 with LOCAL, UI: REQUIRED). No remediation details are provided in the connecte...
CVE-2021-46326
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component asanmemcpy...
CVE-2021-46326
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component asanmemcpy...
CVE-2021-46326
Summary: Moddable SDK v11.5.0 is affected by a heap-buffer-overflow caused by a boundary error in the __asan_memcpy component when handling untrusted input. This vulnerability could allow a remote attacker to execute arbitrary code on the system. The CNVD entry confirms the issue and impact; no e...
Moddable SDK security vulnerability
Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. and XS is one of the embedded JavaScript engines. A security vulnerability exists in Moddable SDK, which stems from a SEGV vulnerability discovered in Moddable SDK v11.5.0 via the xs source...
PT-2022-12644
Name of the Vulnerable Software and Affected Versions Moddable SDK version 11.5.0 Description The issue is related to a SEGV vulnerability found in the Moddable SDK. It occurs via xs/sources/xsDataView.c in fx ArrayBuffer prototype concat. Recommendations For Moddable SDK version 11.5.0, consider...
Moddable SDK buffer error vulnerability
Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable USA. a security vulnerability exists in Moddable SDK v11.5.0, which stems from an invalid memory access in component asanmemmove. No details of the vulnerability are currently available...
CVE-2021-46334: Out-of-bounds Write
Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component interceptorstrcat...
CVE-2021-46333: Improper Restriction of Operations within the Bounds of a Memory Buffer
Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component asanmemmove...