PT-2022-12770

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A heap-use-after-free issue was discovered in Cesanta MJS via the mjs apply function at src/mjs exec.c. Recommendations For version 2.20.0, at the moment, there is no information about a newer version tha...

PT-2022-12785

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs print at src/mjs builtin.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, at the moment, there is no...

PT-2022-12732

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description The issue is related to a SEGV vulnerability via the jsi ArraySpliceCmd function at src/jsiArray.c. This can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, consider disabling the jsi...

PT-2022-12757

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs apply at src/mjs exec.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider restricting access to the...

CVE-2021-46486: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArraySpliceCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46510: Reachable Assertion

There is an Assertion s ownedstrings.buf + mjs-ownedstrings.len' failed at src/mjsgc.c in Cesanta MJS v2.20.0...

PT-2022-12760

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to an assertion failure in the mjs stack size function, specifically when checking if mjs-scopes is greater than or equal to scopes len. This failure occurs at src/mjs exec.c in Cesan...

PT-2022-12775

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs execute at src/mjs exec.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, at the moment, there is no...

CVE-2021-46496: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiObjFree in src/jsiObj.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46517: Reachable Assertion

There is an Assertion mjsstacksize&mjs-scopes 0' failed at src/mjsexec.c in Cesanta MJS v2.20.0...

CVE-2021-46489: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiDecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12762

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to an assertion failure in the mjs stack size function, specifically when checking if mjs-scopes is greater than 0. This failure occurs in the src/mjs exec.c file of Cesanta MJS...

CVE-2021-46484: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiIncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46102: Integer Overflow or Wraparound

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

CVE-2021-46498: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiwswebsocketObjFree in src/jsiWebSocket.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46514: Reachable Assertion

There is an Assertion 'ppos != NULL && mjsisnumberppos' failed at src/mjscore.c in Cesanta MJS v2.20.0...

CVE-2021-46525: Use After Free

Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjsapply at src/mjsexec.c...

CVE-2021-46527: Out-of-bounds Write

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsgetcstring at src/mjsstring.c...

PT-2022-12795

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs json stringify at src/mjs json.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider disabling the mjs...

Jsish jsiClearStack Denial of Service Vulnerability

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiClearStack in src/jsiEval.c...