3202 matches found
Memory corruption
Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c...
Heap overflow
Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c...
Heap overflow
Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c...
Heap overflow
Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46483
Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c...
CVE-2021-46481
Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c...
CVE-2021-46481
CVE-2021-46481 affects Jsish v3.5.0, with the NVD describing a memory leak via linenoise.c (src/linenoise.c). CNVD-2022-07933 additionally references a buffer/heap overflow vulnerability related to Jsish linenoise operations. The exact affected product/version in public disclosures is Jsish 3.5.0...
CVE-2021-46482
Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c...
CVE-2021-46480
Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46478
Jsish v3.5.0 contains a heap buffer overflow caused by the function jsiClearStack in src/jsiEval.c, leading to Denial of Service (DoS). The vulnerability is documented across multiple sources (NVD CVE-2021-46478 and CNVD/CVE records) and is characterized by a DoS condition without confirmed remot...
CVE-2021-46475
Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46475
The CVE-2021-46475 entry concerns Jsish v3.5.0, where a heap buffer overflow is triggered by jsi_ArraySliceCmd in src/jsiArray.c, leading to Denial of Service (DoS). Multiple connected documents corroborate the vulnerability description (heap overflow in Jsish 3.5.0 via jsi_ArraySliceCmd, DoS); h...
CVE-2021-46477
Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46474
CVE-2021-46474 affects Jsish v3.5.0 and is caused by a heap-based buffer overflow in jsiEvalCodeSub (src/jsiEval.c), which can lead to a Denial of Service. Sources across NVD/CNVD/CVELIST describe the issue consistently, with DoS impact; no exploit details are provided in the connected documents....
CVE-2021-46475: Out-of-bounds Write
Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46483: Out-of-bounds Write
Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c...
CVE-2021-46481: Missing Release of Memory after Effective Lifetime
Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c...
CVE-2021-46480: Out-of-bounds Write
Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...
Jsish 缓冲区错误漏洞
Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiArraySliceCmd in src/jsiArray.c...