CVE-2021-46528

Cesanta MJS v2.20.0 contains a SEGV vulnerability in the mjs binary exploitable via /usr/local/bin/mjs+0x5361e, leading to Denial of Service. Affected component: Cesanta MJS (embedded JavaScript engine). Root cause: segmentation fault reported in sources; exploitation status and exact fix are not...

CVE-2021-46516

CVE-2021-46516 affects Cesanta MJS v2.20.0, an embedded JavaScript engine for C/C++. The vulnerability is a SEGV caused by improper handling of stack size in mjs_core.c (mjs_stack_size), leading to a Denial of Service. Exploit status and a concrete remediation/patch version are not provided in th...

CVE-2021-46512

CVE-2021-46512 affects Cesanta MJS v2.20.0. A SEGV vulnerability is triggered via mjs_apply in src/mjs_exec.c, leading to Denial of Service. The provided documents confirm the affected software/component and the root cause (segmentation fault in the mjs_apply path). Publicly disclosed details des...

CVE-2021-46492

CVE-2021-46492 affects Jsish v3.5.0. A SEGV vulnerability occurs via Jsi_FunctionInvoke in src/jsiFunc.c, enabling Denial of Service. Multiple connected entries reiterate the DoS impact for Jsish 3.5.0; no exploits, vectors, or fixes are detailed in the provided documents. Exploitation details ar...

CVE-2021-46492

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiFunctionInvoke at src/jsiFunc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46490

CVE-2021-46490 affects Jsish v3.5.0, with a SEGV vulnerability triggered via NumberConstructor in src/jsiNumber.c. This defect can lead to a Denial of Service (DoS). The connected documents consistently describe the issue as a runtime crash caused by number handling in Jsish, but do not provide m...

CVE-2021-46490

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46491

CVE-2021-46491 affects Jsish v3.5.0 and describes a SEGV vulnerability triggered via Jsi_CommandPkgOpts in src/jsiCmds.c, leading to DoS. Multiple connected sources corroborate the vulnerability details. The available documents do not provide remediation steps or confirmed exploit details. If tru...

CVE-2021-46488

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46487

The CVE-2021-46487 entry concerns Jsish v3.5.0, which harbors a SEGV vulnerability triggered via /lib/x86_64-linux-gnu/libc.so.6+0x18e506 that can lead to a Denial of Service (DoS). The connected sources confirm the affected product, version, and underlying cause. No remediation steps or exploit ...

CVE-2021-46487

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x8664-linux-gnu/libc.so.6+0x18e506. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46488

Jsish v3.5.0 contains a SEGV vulnerability exploitable through jsi_ArrayConcatCmd in src/jsiArray.c, leading to Denial of Service. Affected software: Jsish 3.5.0. Root cause: array concatenation path causes segmentation fault; impact: availability impact (DO S) as per CVSS metrics. No remediation...

CVE-2021-46486

CVE-2021-46486 affects Jsish v3.5.0. A SEGV vulnerability is triggered via jsi_ArraySpliceCmd in src/jsiArray.c, causing a Denial of Service. Public references in the provided documents confirm the vulnerable component and function, with no explicit exploit details or in-the-wild exploit status d...

CVE-2021-46486

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArraySpliceCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46485

CVE-2021-46485 affects Jsish 3.5.0, with a SEGV vulnerability triggered by Jsi_ValueIsNumber in src/jsiValue.c that can cause Denial of Service. The connected records confirm the vulnerable component and the impact but do not specify a fixed version or patch. No exploitation details are provided ...

CVE-2021-46485

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-44647

A flaw was found in Lua. An SEGV crash in the funcnamefromcode function in ldebug.c during error handling occurs in 'close' metamethods. This flaw allows an attacker to cause a denial of service...

OSV-2022-79 Segv on unknown address in gp_semaphore_close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43984 Crash type: Segv on unknown address Crash state: gpsemaphoreclose gxsemaphorefree icclinkcachefinalize...

Espruino has unspecified vulnerabilities

Espruino is a JavaScript interpreter. It is designed for devices with only 128kB flash memory and 8kB RAM.A security vulnerability exists in Espruino, which stems from the fact that Espruino 2v11.251 was found to contain a SEGV vulnerability via src jsinteractivec in jsiGetDeviceFromClass. No...

Unspecified vulnerability in Moddable SDK (CNVD-2022-08281)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. and XS is one of the embedded JavaScript engines. A security vulnerability exists in Moddable SDK, which stems from a SEGV vulnerability discovered in Moddable SDK v11.5.0 via the xs source...