CVE-2021-46500: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiArgTypeCheck in src/jsiFunc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46553: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjssetinternal at src/mjsobject.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12736

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A SEGV issue was found in Jsish via the NumberConstructor at src/jsiNumber.c, which can cause a Denial of Service DoS. Recommendations For Jsish version 3.5.0, at the moment, there is no information about a newe...

PT-2022-12766

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A global buffer overflow was discovered in Cesanta MJS via the c vsnprintf function at mjs/src/common/str util.c. Recommendations For Cesanta MJS version 2.20.0, consider updating to a newer version that...

CVE-2021-46548: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via addlinenomapitem at src/mjsbcode.c. This vulnerability can lead to a Denial of Service DoS...

Jsish jsiValueObjDelete Denial of Service Vulnerability

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages and could lead to a denial of service DoS via a jsiValueObjDelete in src/jsiEval.c...

CVE-2021-46508: Reachable Assertion

There is an Assertion i partscnt' failed at src/mjsbcode.c in Cesanta MJS v2.20.0...

CVE-2021-46501: Use After Free

Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46524: Out-of-bounds Write

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjsjson.c...

CVE-2021-46519: Out-of-bounds Write

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsarraylength at src/mjsarray.c...

CVE-2021-46490: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46492: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiFunctionInvoke at src/jsiFunc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46491: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiCommandPkgOpts at src/jsiCmds.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46556: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsbcodeinsertoffset at src/mjsbcode.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46515: Reachable Assertion

There is an Assertion mjsstacksize&mjs-scopes = scopeslen' failed at src/mjsexec.c in Cesanta MJS v2.20.0...

CVE-2021-46532: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via execexpr at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46526: Buffer Copy without Checking Size of Input

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...

PT-2022-12759

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to an assertion failure in the src/mjs core.c file, specifically with the condition ppos != NULL && mjs is numberppos. This failure occurs in Cesanta MJS version 2.20.0. Recommendatio...

PT-2022-12755

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description An assertion failure occurred at src/mjs gc.c in Cesanta MJS due to the condition s owned strings.buf + mjs-owned strings.len not being met. Recommendations For Cesanta MJS version 2.20.0, at the moment,...

PT-2022-12731

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description The issue is related to a SEGV vulnerability via Jsi ValueIsNumber at src/jsiValue.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, as a temporary workaround, consider...