CVE-2021-46485

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46484

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiIncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46102

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

Integer overflow

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

CVE-2021-46102

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

PT-2022-12758

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A global buffer overflow issue was discovered in Cesanta MJS via the mjs mk string function at mjs/src/mjs string.c. Recommendations For Cesanta MJS version 2.20.0, consider applying a patch or fix to...

PT-2022-12738

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description The issue is related to a SEGV vulnerability via Jsi FunctionInvoke at src/jsiFunc.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, consider disabling the Jsi FunctionInvoke...

CVE-2021-46554: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsjsonstringify at src/mjsjson.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46549: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parsecvaltype at src/mjsffi.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46499: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiValueCopyMove in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46512: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsapply at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46495: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46486: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArraySpliceCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46507: Uncontrolled Recursion

Jsish v3.5.0 was discovered to contain a stack overflow via JsiLogMsg at src/jsiUtils.c...

CVE-2021-46485: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12771

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A global buffer overflow issue was discovered in Cesanta MJS via the snquote function at src/mjs json.c. Recommendations For Cesanta MJS version 2.20.0, consider restricting access to the snquote function...

CVE-2021-46510: Reachable Assertion

There is an Assertion s ownedstrings.buf + mjs-ownedstrings.len' failed at src/mjsgc.c in Cesanta MJS v2.20.0...

PT-2022-12760

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to an assertion failure in the mjs stack size function, specifically when checking if mjs-scopes is greater than or equal to scopes len. This failure occurs at src/mjs exec.c in Cesan...

PT-2022-12775

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs execute at src/mjs exec.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, at the moment, there is no...

CVE-2021-46496: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiObjFree in src/jsiObj.c. This vulnerability can lead to a Denial of Service DoS...