CVE-2021-46528

Cesanta MJS v2.20.0 contains a SEGV vulnerability in the mjs binary exploitable via /usr/local/bin/mjs+0x5361e, leading to Denial of Service. Affected component: Cesanta MJS (embedded JavaScript engine). Root cause: segmentation fault reported in sources; exploitation status and exact fix are not...

CVE-2021-46516

CVE-2021-46516 affects Cesanta MJS v2.20.0, an embedded JavaScript engine for C/C++. The vulnerability is a SEGV caused by improper handling of stack size in mjs_core.c (mjs_stack_size), leading to a Denial of Service. Exploit status and a concrete remediation/patch version are not provided in th...

CVE-2021-46512

CVE-2021-46512 affects Cesanta MJS v2.20.0. A SEGV vulnerability is triggered via mjs_apply in src/mjs_exec.c, leading to Denial of Service. The provided documents confirm the affected software/component and the root cause (segmentation fault in the mjs_apply path). Publicly disclosed details des...

CVE-2021-46492

CVE-2021-46492 affects Jsish v3.5.0. A SEGV vulnerability occurs via Jsi_FunctionInvoke in src/jsiFunc.c, enabling Denial of Service. Multiple connected entries reiterate the DoS impact for Jsish 3.5.0; no exploits, vectors, or fixes are detailed in the provided documents. Exploitation details ar...

CVE-2021-46492

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiFunctionInvoke at src/jsiFunc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46490

CVE-2021-46490 affects Jsish v3.5.0, with a SEGV vulnerability triggered via NumberConstructor in src/jsiNumber.c. This defect can lead to a Denial of Service (DoS). The connected documents consistently describe the issue as a runtime crash caused by number handling in Jsish, but do not provide m...

CVE-2021-46490

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46491

CVE-2021-46491 affects Jsish v3.5.0 and describes a SEGV vulnerability triggered via Jsi_CommandPkgOpts in src/jsiCmds.c, leading to DoS. Multiple connected sources corroborate the vulnerability details. The available documents do not provide remediation steps or confirmed exploit details. If tru...

CVE-2021-46488

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46487

The CVE-2021-46487 entry concerns Jsish v3.5.0, which harbors a SEGV vulnerability triggered via /lib/x86_64-linux-gnu/libc.so.6+0x18e506 that can lead to a Denial of Service (DoS). The connected sources confirm the affected product, version, and underlying cause. No remediation steps or exploit ...

CVE-2021-46487

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x8664-linux-gnu/libc.so.6+0x18e506. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46488

Jsish v3.5.0 contains a SEGV vulnerability exploitable through jsi_ArrayConcatCmd in src/jsiArray.c, leading to Denial of Service. Affected software: Jsish 3.5.0. Root cause: array concatenation path causes segmentation fault; impact: availability impact (DO S) as per CVSS metrics. No remediation...

CVE-2021-46486

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArraySpliceCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46486

CVE-2021-46486 affects Jsish v3.5.0. A SEGV vulnerability is triggered via jsi_ArraySpliceCmd in src/jsiArray.c, causing a Denial of Service. Public references in the provided documents confirm the vulnerable component and function, with no explicit exploit details or in-the-wild exploit status d...

CVE-2021-46485

CVE-2021-46485 affects Jsish 3.5.0, with a SEGV vulnerability triggered by Jsi_ValueIsNumber in src/jsiValue.c that can cause Denial of Service. The connected records confirm the vulnerable component and the impact but do not specify a fixed version or patch. No exploitation details are provided ...

CVE-2021-46485

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-44647

A flaw was found in Lua. An SEGV crash in the funcnamefromcode function in ldebug.c during error handling occurs in 'close' metamethods. This flaw allows an attacker to cause a denial of service...

OSV-2022-79 Segv on unknown address in gp_semaphore_close

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43984 Crash type: Segv on unknown address Crash state: gpsemaphoreclose gxsemaphorefree icclinkcachefinalize...

Unspecified vulnerability in Moddable SDK (CNVD-2022-08281)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. and XS is one of the embedded JavaScript engines. A security vulnerability exists in Moddable SDK, which stems from a SEGV vulnerability discovered in Moddable SDK v11.5.0 via the xs source...

Unspecified Vulnerability in Moddable SDK

Moddable SDK is a set of software development kits SDKs for IoT embedded software development from the US company Moddable. A security vulnerability exists in the Moddable SDK, which stems from the discovery that Moddable SDK v11.5.0 contains a SEGV vulnerability via the xs source xsDataView.c in...