CVE-2022-22891

CVE-2022-22891 : JerryScript 3.0.0 contains a segmentation fault (SEGV) vulnerability via the function ecma_ref_object_inline in /jerry-core/ecma/base/ecma-gc.c. The connected documents confirm this exact codepath as the root cause and the vulnerability’s existence across multiple sources. The pr...

CVE-2021-46330

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...

CVE-2021-46330

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...

CVE-2021-46329

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component fini...

CVE-2021-46331

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype...

CVE-2021-46323

Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass...

CVE-2021-46327

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...

CVE-2021-46322

Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component dukpushtval in duktape/dukapistack.c...

Design/Logic Flaw

Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component dukpushtval in duktape/dukapistack.c...

Design/Logic Flaw

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype...

Code injection

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...

CVE-2021-46322

Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component dukpushtval in duktape/dukapistack.c...

Code injection

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...

Security feature bypass

Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass...

Design/Logic Flaw

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component fini...

CVE-2021-46331

Summary: CVE-2021-46331 affects Moddable SDK v11.5.0, where a SEGV occurs in fxProxyGetPrototype (xsProxyGetPrototype) within the XS engine source xsProxy.c. The vulnerability is described as a segmentation fault in Moddable SDK, with the CVSS data indicating a partial availability impact (availa...

CVE-2021-46331

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype...

CVE-2021-46330

CVE-2021-46330 affects Moddable SDK v11.5.0 with a SEGV vulnerability in xs/sources/xsDataView.c, specifically fx_ArrayBuffer_prototype_concat. This is the root cause described across multiple sources. NVD lists impact as partial availability (CVSSv2) and high impact on availability (CVSSv3) with...

CVE-2021-46330

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...

CVE-2021-46327

Moddable SDK v11.5.0 contains a SEGV vulnerability in xsArray.c (fx_Array_prototype_sort). The root cause is a crash in the sort implementation within the XS engine (xs/sources/xsArray.c: fx_Array_prototype_sort). The provided connected documents confirm the affected product and code location but...