CVE-2021-46489: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiDecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12766

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A global buffer overflow was discovered in Cesanta MJS via the c vsnprintf function at mjs/src/common/str util.c. Recommendations For Cesanta MJS version 2.20.0, consider updating to a newer version that...

PT-2022-12755

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description An assertion failure occurred at src/mjs gc.c in Cesanta MJS due to the condition s owned strings.buf + mjs-owned strings.len not being met. Recommendations For Cesanta MJS version 2.20.0, at the moment,...

PT-2022-12736

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A SEGV issue was found in Jsish via the NumberConstructor at src/jsiNumber.c, which can cause a Denial of Service DoS. Recommendations For Jsish version 3.5.0, at the moment, there is no information about a newe...

CVE-2021-46484: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiIncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46506: Reachable Assertion

There is an Assertion 'v-d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0...

CVE-2021-46102: Integer Overflow or Wraparound

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

CVE-2021-46498: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiwswebsocketObjFree in src/jsiWebSocket.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46497: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiUserObjDelete in src/jsiUserObj.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46514: Reachable Assertion

There is an Assertion 'ppos != NULL && mjsisnumberppos' failed at src/mjscore.c in Cesanta MJS v2.20.0...

PT-2022-12792

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via parse cval type at src/mjs ffi.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider disabling the parse...

CVE-2021-46525: Use After Free

Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjsapply at src/mjsexec.c...

Jsish jsiClearStack Denial of Service Vulnerability

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiClearStack in src/jsiEval.c...

PT-2022-12777

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A SEGV issue was found in Cesanta MJS via the exec expr function at src/mjs exec.c, which can cause a Denial of Service DoS. Recommendations For version 2.20.0, consider disabling the exec expr function a...

PT-2022-12789

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs next at src/mjs object.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, at the moment, there is no...

PT-2022-12793

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via free json frame at src/mjs json.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider disabling the free...

PT-2022-12763

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A heap buffer overflow was discovered in Cesanta MJS via the mjs disown function at src/mjs core.c. Recommendations For Cesanta MJS version 2.20.0, consider disabling the mjs disown function as a temporar...

PT-2022-12765

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A heap buffer overflow issue was discovered in Cesanta MJS via the mjs jprintf function at src/mjs util.c. Recommendations For Cesanta MJS version 2.20.0, consider disabling the mjs jprintf function as a...

PT-2022-12769

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A heap buffer overflow issue was discovered in Cesanta MJS via the snquote function at mjs/src/mjs json.c. Recommendations For version 2.20.0, consider updating to a newer version that contains a fix for...

PT-2022-12785

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs print at src/mjs builtin.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, at the moment, there is no...