CVE-2022-44789

CVE-2022-44789 Files: PublicReferenceURL.txt: public reference for CVE writeup.md: Writeup + exploit attachment: Vulnerable MuJS version + sample exploit...

CVE-2026-110715

A flaw was found in MuJS. The JavaScript engine fails to properly validate array boundaries when sorting an array whose length property has been enlarged. By supplying specially crafted JavaScript code, an attacker can trigger out-of-bounds memory operations, potentially leading to memory...

CVE-2026-110715

MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Apsortcmp and...

UBUNTU-CVE-2026-110715

MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Apsortcmp and...

CVE-2026-110715

MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Apsortcmp and...

CVE-2026-110715

The MuJS JavaScript engine, versions 1.3.6 before 1.3.9 , contains a heap out-of-bounds read and write vulnerability in the Array.prototype.sort function. An attacker can supply JavaScript that inflates a dense array's length, causing the Ap_sort_cmp and Ap_sort_swap functions to access memory sl...

CVE-2026-110715 MuJS 1.3.6 before 1.3.9 Heap Out-of-Bounds Read/Write via Array.prototype.sort

MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Apsortcmp and...

EUVD-2026-101138

MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Apsortcmp and...

PT-2026-114117

MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Ap sort cmp and Ap...

CVE-2026-88362

A flaw was found in MuJS. An attacker can trigger a Denial of Service DoS by providing specially crafted JavaScript input containing an excessively large array index. This flaw causes an out-of-range numeric value to be converted to an integer without proper validation, leading to undefined...

SUSE CVE-2026-88362

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-88362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively...

DEBIAN-CVE-2026-88362

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. Th...

CVE-2026-88362

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. Th...

UBUNTU-CVE-2026-88362

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. Th...

CVE-2026-88362

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. Th...

CVE-2026-88362

The MuJS e892c9fdb engine is vulnerable to an incorrect numeric conversion in the jsR_isindex() function located in jsrun.c. A specially crafted JavaScript input featuring an excessively large numeric array index can bypass range validation, causing an out-of-range floating-point value to be conv...

CVE-2026-88362

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. Th...

PT-2026-97867

Name of the Vulnerable Software and Affected Versions MuJS version e892c9fdb Description An incorrect numeric conversion occurs in the jsR isindex function within jsrun.c. A specially crafted JavaScript input featuring an excessively large numeric array index can cause an out-of-range...

EUVD-2026-86283

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. Th...