CVE-2020-25461: Undefined Security Weakness

Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of service SEGV...

CVE-2020-25463: Undefined Security Weakness

Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service SEGV...

CVE-2020-25465: NULL Pointer Dereference

Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK before OS200908 causes a denial of service SEGV...

Moddable SDK OS Security Vulnerability

Moddable SDK is a set of software development kits SDKs for IoT embedded software development from Moddable, Inc. in the United States. A security vulnerability exists in Moddable SDK versions prior to OS200908, which originates in the moddable/xs/sources/xsCommon.c:916 fxUTF8Decode function...

PT-2020-16086

Name of the Vulnerable Software and Affected Versions Moddable SDK versions prior to OS200908 Description The issue is related to an invalid memory access in the fxUTF8Decode function at moddable/xs/sources/xsCommon.c:916, which causes a denial of service SEGV. Recommendations For Moddable SDK...

PT-2020-16085

Name of the Vulnerable Software and Affected Versions Moddable SDK versions prior to OS200903 Description The issue is related to a heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562. Recommendations For Moddable SDK versions prior to OS200903,...

Moddable SDK Buffer Error Vulnerability

Moddable SDK is a set of software development kits SDKs for embedded software development for the Internet of Things from Moddable, Inc. in the United States. A buffer error vulnerability exists in versions prior to Moddable SDK 20200903, which stems from a moddable/xs/sources/xsDebug.c heap buff...

PT-2020-16084

Name of the Vulnerable Software and Affected Versions Moddable SDK versions prior to OS200908 Description The issue is related to an invalid memory access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c, which causes a denial of service SEGV. Recommendations For Moddable SDK versio...

PT-2020-16087

Name of the Vulnerable Software and Affected Versions Moddable SDK versions prior to 20200903 Description The issue is related to a heap buffer overflow at moddable/xs/sources/xsDebug.c. This overflow occurs while creating a stack frame, resulting in the top stack frame being only partially...

Moddable SDK OS Security Vulnerability

Moddable SDK is a software development kit SDK for embedded software development for the Internet of Things IoT from Moddable, Inc. in the U.S. XS is one of the embedded JavaScript engines. A security vulnerability exists in Moddable SDK versions prior to OS200908, which stems from an invalid...

PT-2020-16088

Name of the Vulnerable Software and Affected Versions Moddable SDK versions prior to OS200908 Description The issue is related to a Null Pointer Dereference in the xObjectBindingFromExpression function at moddable/xs/sources/xsSyntaxical.c:3419. This causes a denial of service SEGV. Recommendatio...

CVE-2020-25464: Out-of-bounds Write

Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is only partially initialized because the stack overflowed while creating the frame. This leads to a crash in the code sending the stack frame to the debugger...

Moddable SDK OS Code Issue Vulnerability

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. in the United States. A security vulnerability exists in versions of Moddable SDK prior to OS200908, which results in a denial of service SEGV due to xObjectBindingFromExpression at...

CVE-2019-16366

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst...

Heap overflow

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst...

CVE-2019-16366

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst...

CVE-2019-16366

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst...

CVE-2019-16366

CVE-2019-16366 affects XS 9.0.0 in Moddable SDK OS180329. The issue is a heap-based buffer overflow in fxBeginHost (xsAPI.c) when invoked via fxRunDefine (xsRun.c). This is demonstrated by crafted JavaScript code to xst. The connected Red Hat/OSV entries corroborate the same description. Public e...

CVE-2019-16366: Out-of-bounds Write

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst...

PT-2019-14646

Name of the Vulnerable Software and Affected Versions Moddable SDK OS180329 version 9.0.0 Description The issue is a heap-based buffer overflow in the fxBeginHost function in xsAPI.c when called from fxRunDefine in xsRun.c. This can be triggered by crafted JavaScript code sent to xst...