CVE-2021-46521: Buffer Copy without Checking Size of Input

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via cvsnprintf at mjs/src/common/strutil.c...

CVE-2021-46519: Out-of-bounds Write

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsarraylength at src/mjsarray.c...

CVE-2021-46490: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46492: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiFunctionInvoke at src/jsiFunc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46491: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiCommandPkgOpts at src/jsiCmds.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46556: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsbcodeinsertoffset at src/mjsbcode.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46515: Reachable Assertion

There is an Assertion mjsstacksize&mjs-scopes = scopeslen' failed at src/mjsexec.c in Cesanta MJS v2.20.0...

CVE-2021-46513: Buffer Copy without Checking Size of Input

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjsmkstring at mjs/src/mjsstring.c...

CVE-2021-46532: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via execexpr at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46526: Buffer Copy without Checking Size of Input

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...

PT-2022-12753

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description An assertion failure occurs at src/mjs bcode.c in Cesanta MJS. The issue is related to the condition i parts cnt, which suggests a potential out-of-bounds access or incorrect indexing. Recommendations For...

CVE-2021-46534: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getpropbuiltinforeign at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46527: Out-of-bounds Write

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsgetcstring at src/mjsstring.c...

PT-2022-12757

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via mjs apply at src/mjs exec.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider restricting access to the...

CVE-2021-46488: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46482

Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c...

CVE-2021-46483

Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c...

CVE-2021-46478

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46478

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

Heap overflow

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...