CVE-2021-46331

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype...

CVE-2021-46332

Moddable SDK v11.5.0 contains a heap-buffer-overflow in xs/sources/xsDataView.c at fxUint8Getter. Affected component is the Moddable SDK (IoT SDK); the overflow can lead to arbitrary code execution per CNVD/CNNVD entries. Public references note the same CVE-2021-46332 across multiple vendors (Red...

CVE-2021-46330

CVE-2021-46330 affects Moddable SDK v11.5.0 with a SEGV vulnerability in xs/sources/xsDataView.c, specifically fx_ArrayBuffer_prototype_concat. This is the root cause described across multiple sources. NVD lists impact as partial availability (CVSSv2) and high impact on availability (CVSSv3) with...

CVE-2021-46330

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fxArrayBufferprototypeconcat...

CVE-2021-46327

Moddable SDK v11.5.0 contains a SEGV vulnerability in xsArray.c (fx_Array_prototype_sort). The root cause is a crash in the sort implementation within the XS engine (xs/sources/xsArray.c: fx_Array_prototype_sort). The provided connected documents confirm the affected product and code location but...

CVE-2021-46329

Moddable SDK v11.5.0 contains a SEGV vulnerability in the fini/_fini component. Affects the SDK, with impact described as confidentiality/integrity unaffected, availability impact: PARTIAL (CVSS v2) and HIGH (CVSS v3.1 with LOCAL, UI: REQUIRED). No remediation details are provided in the connecte...

CVE-2021-46328

Moddable SDK v11.5.0 is affected by a heap-buffer-overflow vulnerability in the _libc_start_main component when processing untrusted input. The issue, described in CVE-2021-46328 and corroborated by CNVD-2022-08216 and Red Hat/RH advisories, can allow arbitrary code execution, with impact describ...

CVE-2021-46328

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component libcstartmain...

CVE-2021-46329

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component fini...

CVE-2021-46327

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...

CVE-2021-46326

Summary: Moddable SDK v11.5.0 is affected by a heap-buffer-overflow caused by a boundary error in the __asan_memcpy component when handling untrusted input. This vulnerability could allow a remote attacker to execute arbitrary code on the system. The CNVD entry confirms the issue and impact; no e...

CVE-2021-46326

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component asanmemcpy...

Moddable SDK 安全漏洞

Moddable SDK is a set of software development kits SDKs for IoT embedded software development from the US company Moddable. A security vulnerability exists in the Moddable SDK, which stems from the discovery that Moddable SDK v11.5.0 contains a SEGV vulnerability via the xs source xsDataView.c in...

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a set of software development kits SDKs for IoT embedded software development from the US company Moddable. The Moddable SDK has a stack buffer overflow vulnerability in v11.5.0 that stems from a boundary error in the component interceptorstrcat when handling untrusted input. A...

Moddable SDK 安全漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, U.S. A security vulnerability exists in Moddable SDK v11.5.0, which was discovered to contain a SEGV vulnerability via the component fini. No details of the vulnerability are currently available...

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable USA. v11.5.0 of the Moddable SDK is vulnerable to a heap buffer overflow vulnerability that stems from a boundary error in the asanmemcpy component when handling untrusted input. A remote attacker...

Security Bulletin: Security vulnerabilities have been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Federated Identity Manager

Summary IBM® SDK, Java™ Technology Edition is shipped with IBM Tivoli Federated Identity Manager. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

CVE-2021-38789

Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings...

CVE-2021-38789

Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings...

CVE-2021-38789

Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings...