CVE-2021-29329

OpenSource Moddable v10.5.0 contains a stack overflow in fxBinaryExpressionNodeDistribute (xsTree.c). The issue is triggered within the Moddable XS tree handling, as reported in CVE-2021-29329. Connected sources confirm the affected component and file path, but do not provide explicit exploitatio...

CVE-2021-29328

OpenSource Moddable v10.5.0 contains a buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c. The vulnerability is documented across multiple sources (NVD entry CVE-2021-29328, Red Hat, CNVD) with CVSS details: CVSS v3.1 BASE SCORE 7.1 (HIGH) / LOCAL attack vector, LOW a...

CVE-2021-29328

OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c...

CVE-2021-29327

Moddable OpenSource Moddable v10.5.0 contains a heap buffer overflow in the fx_ArrayBuffer function, located at /moddable/xs/sources/xsDataView.c. The vulnerability is confirmed across multiple feeds (CVE-2021-29327). Impact details from the CVE include memory corruption risks that could reflect ...

CVE-2021-29327

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxArrayBuffer function at /moddable/xs/sources/xsDataView.c...

CVE-2021-29326

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c...

CVE-2021-29326

CVE-2021-29326 affects OpenSource Moddable v10.5.0, with a heap-based buffer overflow in the function fxIDToString (file: /moddable/xs/sources/xsSymbol.c). The connected documents consistently identify a heap overflow in that symbol handling path. No explicit remediation is provided in the source...

CVE-2021-29325

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxStringprototyperepeat function at /moddable/xs/sources/xsString.c...

CVE-2021-29323

CVE-2021-29323 affects OpenSource Moddable v10.5.0, with a heap-based buffer overflow in the ESP WiFi module (path /modules/network/wifi/esp/modwifi.c). Root cause: a heap overflow in that component. The vulnerability is documented across multiple sources (NVD, Red Hat, CNVD, CVE listing) with no...

CVE-2021-29324

CVE-2021-29324 affects OpenSource Moddable v10.5.0, with a stack overflow in the component /moddable/xs/sources/xsScript.c. The vulnerability stems from memory boundary handling that can lead to incorrect read/write across memory. NVD reports a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL, LOW a...

CVE-2021-29324

OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c...

CVE-2021-29323

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp/modwifi.c...

CVE-2021-29328: Out-of-bounds Read

OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c...

CVE-2021-29323: Out-of-bounds Write

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp/modwifi.c...

CVE-2021-29326: Out-of-bounds Write

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c...

CVE-2021-29324: Allocation of Resources Without Limits or Throttling

OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c...

CVE-2021-29325: Out-of-bounds Write

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxStringprototyperepeat function at /moddable/xs/sources/xsString.c...

CVE-2021-29329: Allocation of Resources Without Limits or Throttling

OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute function at /moddable/xs/sources/xsTree.c...

CVE-2021-29327: Out-of-bounds Write

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxArrayBuffer function at /moddable/xs/sources/xsDataView.c...

USN-5081-1 qtbase-opensource-src vulnerabilities

It was discovered that Qt incorrectly handled certain XBM image files. If a user or automated system were tricked into opening a specially crafted PPM file, a remote attacker could cause Qt to crash, resulting in a denial of service. CVE-2020-17507 It was discovered that Qt incorrectly handled...