CVE-2021-46330

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...

PT-2022-12644

Name of the Vulnerable Software and Affected Versions Moddable SDK version 11.5.0 Description The issue is related to a SEGV vulnerability found in the Moddable SDK. It occurs via xs/sources/xsDataView.c in fx ArrayBuffer prototype concat. Recommendations For Moddable SDK version 11.5.0, consider...

Moddable SDK 安全漏洞

Moddable SDK is a set of software development kits SDKs for IoT embedded software development from the US company Moddable. A security vulnerability exists in the Moddable SDK, which stems from the discovery that Moddable SDK v11.5.0 contains a SEGV vulnerability via the xs source xsDataView.c in...

PT-2021-18172

Name of the Vulnerable Software and Affected Versions: Moddable version 10.5.0 Description: A heap buffer overflow was discovered in the fx ArrayBuffer function at /moddable/xs/sources/xsDataView.c. This issue affects the Moddable software. Recommendations: For Moddable version 10.5.0, consider...

Chrome V8 JavaScript Engine Remote Code Execution Exploit

Chrome V8 Javascript Engine remote code execution zero day exploit. Google is expected to release an update to their browser on tuesday 04/14/2021 that will address this vulnerability. / BSD 2-Clause License Copyright c 2021, rajvardhan agarwal All rights reserved. Redistribution and use in sourc...

Google Chrome SimplfiedLowering Integer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Google Chrome versions before 87.0.4280.88 integer overflow during SimplfiedLowering phase', 'Description' = %q This module exploits an issue in...

Google Chrome SimplfiedLowering Integer Overflow Exploit

This Metasploit module exploits an issue in Google Chrome versions before 87.0.4280.88 64 bit. The exploit makes use of an integer overflow in the SimplifiedLowering phase in turbofan. It is used along with a typer hardening bypass using ArrayPrototypeShift to create a JSArray with a length of -1...

Google Chrome 81.0.4044 V8 Remote Code Execution

Exploit Title: Google Chrome prior 83.0.4103.106 V8 - Remote Code Execution Date: 06/04/2021 Exploit Author: Tobias Marcotto Tested on: Kali Linux x64 Version: 83.0.4103.106 Description: Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially...

Google Chrome 81.0.4044 V8 - Remote Code Execution Exploit

Exploit Title: Google Chrome 81.0.4044 V8 - Remote Code Execution Exploit Author: Tobias Marcotto Tested on: Kali Linux x64 Version: 83.0.4103.106 Description: Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a...

Google Chrome versions before 87.0.4280.88 integer overflow during SimplfiedLowering phase

This module exploits an issue in Google Chrome versions before 87.0.4280.88 64 bit. The exploit makes use of an integer overflow in the SimplifiedLowering phase in turbofan. It is used along with a type hardening bypass using ArrayPrototypeShift to create a JSArray with a length of -1. This is...

CVE-2018-21238

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2018-21238

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer0xfffffffe call...

Design/Logic Flaw

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2018-21238

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2018-21238

CVE-2018-21238 affects Foxit PhantomPDF up to version 8.3.7, where a call involving ArrayBuffer(0xfffffffe) enables memory consumption. The connected documents confirm the vulnerability but do not provide concrete details on root cause, affected components beyond the product/version line, exploit...

CVE-2018-21240

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2018-21240

CVE-2018-21240 affects Foxit Reader and PhantomPDF prior to version 9.2. The issue is a memory consumption flaw triggered by an ArrayBuffer(0xfffffffe) call in these products. Root cause is a memory handling vulnerability leading to resource exhaustion. Impact is partial availability degradation ...

CVE-2018-21240

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer0xfffffffe call...

PT-2020-8884

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows memory consumption via an ArrayBuffer0xfffffffe call. Recommendations For Foxit Reader versions prior to 9.2, update to version...

PT-2020-8882

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.7 Description An issue in Foxit PhantomPDF allows memory consumption via an ArrayBuffer0xfffffffe call. Recommendations For Foxit PhantomPDF versions prior to 8.3.7, update to version 8.3.7 or later to...