CVE-2021-46492

CVE-2021-46492 affects Jsish v3.5.0. A SEGV vulnerability occurs via Jsi_FunctionInvoke in src/jsiFunc.c, enabling Denial of Service. Multiple connected entries reiterate the DoS impact for Jsish 3.5.0; no exploits, vectors, or fixes are detailed in the provided documents. Exploitation details ar...

CVE-2021-46491

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiCommandPkgOpts at src/jsiCmds.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46490

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46491

CVE-2021-46491 affects Jsish v3.5.0 and describes a SEGV vulnerability triggered via Jsi_CommandPkgOpts in src/jsiCmds.c, leading to DoS. Multiple connected sources corroborate the vulnerability details. The available documents do not provide remediation steps or confirmed exploit details. If tru...

CVE-2021-46488

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46488

Jsish v3.5.0 contains a SEGV vulnerability exploitable through jsi_ArrayConcatCmd in src/jsiArray.c, leading to Denial of Service. Affected software: Jsish 3.5.0. Root cause: array concatenation path causes segmentation fault; impact: availability impact (DO S) as per CVSS metrics. No remediation...

CVE-2021-46488

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46486

CVE-2021-46486 affects Jsish v3.5.0. A SEGV vulnerability is triggered via jsi_ArraySpliceCmd in src/jsiArray.c, causing a Denial of Service. Public references in the provided documents confirm the vulnerable component and function, with no explicit exploit details or in-the-wild exploit status d...

CVE-2021-46486

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArraySpliceCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46484

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiIncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46485

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46102

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

Integer overflow

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

CVE-2021-46102

From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.stvalue is read directly from ELF file without checking. If the sym.stvalue is rather large, an integer overflow is triggered while calculating the variable "addr"...

PT-2022-12758

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A global buffer overflow issue was discovered in Cesanta MJS via the mjs mk string function at mjs/src/mjs string.c. Recommendations For Cesanta MJS version 2.20.0, consider applying a patch or fix to...

CVE-2021-46554: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsjsonstringify at src/mjsjson.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46549: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parsecvaltype at src/mjsffi.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46499: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiValueCopyMove in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46512: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsapply at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46495: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c. This vulnerability can lead to a Denial of Service DoS...