980 matches found
Design/Logic Flaw
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype...
Security feature bypass
Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass...
Design/Logic Flaw
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component fini...
Code injection
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...
CVE-2021-46331
Summary: CVE-2021-46331 affects Moddable SDK v11.5.0, where a SEGV occurs in fxProxyGetPrototype (xsProxyGetPrototype) within the XS engine source xsProxy.c. The vulnerability is described as a segmentation fault in Moddable SDK, with the CVSS data indicating a partial availability impact (availa...
CVE-2021-46331
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype...
CVE-2021-46330
CVE-2021-46330 affects Moddable SDK v11.5.0 with a SEGV vulnerability in xs/sources/xsDataView.c, specifically fx_ArrayBuffer_prototype_concat. This is the root cause described across multiple sources. NVD lists impact as partial availability (CVSSv2) and high impact on availability (CVSSv3) with...
CVE-2021-46330
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...
CVE-2021-46327
Moddable SDK v11.5.0 contains a SEGV vulnerability in xsArray.c (fx_Array_prototype_sort). The root cause is a crash in the sort implementation within the XS engine (xs/sources/xsArray.c: fx_Array_prototype_sort). The provided connected documents confirm the affected product and code location but...
CVE-2021-46329
Moddable SDK v11.5.0 contains a SEGV vulnerability in the fini/_fini component. Affects the SDK, with impact described as confidentiality/integrity unaffected, availability impact: PARTIAL (CVSS v2) and HIGH (CVSS v3.1 with LOCAL, UI: REQUIRED). No remediation details are provided in the connecte...
CVE-2021-46327
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...
CVE-2021-46329
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component fini...
CVE-2021-46323
Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass...
CVE-2021-46323
CVE-2021-46323 affects Espruino 2v11.251, with a SEGV (segmentation fault) vulnerability in src/jsinteractive.c, function jsiGetDeviceFromClass. The CVSS data show: AV:N/AC:M/Au:N/C:N/I:N/A:P (CVSS2, base 4.3) and AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (CVSS3, base 5.5). Exploitation details are not...
CVE-2021-46322
Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component dukpushtval in duktape/dukapistack.c...
CVE-2021-46322
Summary: CVE-2021-46322 affects Duktape 2.99.99. The vulnerability is a SEGV caused by the duk_push_tval flow in duk_api_stack.c. The connected sources confirm this exact component/file and the crash mechanism; exploitation details are not provided in the supplied documents. Impact notes (as stat...
CVE-2021-46322
Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component dukpushtval in duktape/dukapistack.c...
OSV-2022-41 Segv on unknown address in zero
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43538 Crash type: Segv on unknown address Crash state: zero zendexecute fuzzerdorequestfrombuffer...
