CVE-2021-33444

An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is NULL pointer dereference in getpropbuiltinforeign in mjs.c...

PT-2023-31461 · Cesanta · Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta MJS versions 2.20.0 through 2.22.0 Description: The issue is related to an out-of-bounds read in the getprop builtin foreign function when a Built-in API name occurs in a substring of an input string. This can lead to a buffer overflo...

CVE-2021-33444

An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is NULL pointer dereference in getpropbuiltinforeign in mjs.c...

Cesanta MJS 代码问题漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

PT-2022-10240

Name of the Vulnerable Software and Affected Versions mjs affected versions not specified Description An issue was discovered in mjs, a Restricted JavaScript engine, affecting ES6, which is JavaScript version 6. The problem is a NULL pointer dereference in the getprop builtin foreign function...

CVE-2021-41850

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. The system property values can be obtained via getprop by all third-party applications co-located...

PT-2022-11501

Name of the Vulnerable Software and Affected Versions Luna Simo PPR1.180610.011/202001031830 Description An issue was discovered where a pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. The system property values ca...

CVE-2021-41850: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. The system property values can be obtained via getprop by all third-party applications co-located...

PT-2022-12778

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via getprop builtin foreign at src/mjs exec.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider disabling th...

CVE-2020-11836

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no...

Oppo Android Phone with MTK Information Disclosure Vulnerability

OPPO Oppo Android Phone with MTK is a series of OPPO Android phones with MTK chipset from OPPO Guangdong Mobile Communication OPPO Company in China, which is designed to support powerful 3D image processing technology, and outperforms the performance of other CPUs of the same class in 3D image...

PT-2021-9425

Name of the Vulnerable Software and Affected Versions OPPO Android Phone with MTK chipset and Android versions 8.1 through 11 Description The issue is related to an information leak vulnerability. The commands adb shell getprop ro.vendor.aee.enforcing return no, indicating a potential security...