EUVD-2022-33707

Malicious code in bioql PyPI...

Out-of-bounds

Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c...

CVE-2022-29368

CVE-2022-29368 concerns the Moddable SDK. Affected component: the JS engine code path in /moddable/xs/sources/xsDataView.c, where the function fxUint8Getter exposes an out-of-bounds read. Root cause: a pre-commit state (before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45) allowed reading beyond alloc...