CVE-2021-46483

Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c...

CVE-2021-46481

Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c...

CVE-2021-46481

Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c...

CVE-2021-46482

Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c...

CVE-2021-46482

Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c...

CVE-2021-46481

CVE-2021-46481 affects Jsish v3.5.0, with the NVD describing a memory leak via linenoise.c (src/linenoise.c). CNVD-2022-07933 additionally references a buffer/heap overflow vulnerability related to Jsish linenoise operations. The exact affected product/version in public disclosures is Jsish 3.5.0...

CVE-2021-46480

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46478

Jsish v3.5.0 contains a heap buffer overflow caused by the function jsiClearStack in src/jsiEval.c, leading to Denial of Service (DoS). The vulnerability is documented across multiple sources (NVD CVE-2021-46478 and CNVD/CVE records) and is characterized by a DoS condition without confirmed remot...

CVE-2021-46475

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46475

The CVE-2021-46475 entry concerns Jsish v3.5.0, where a heap buffer overflow is triggered by jsi_ArraySliceCmd in src/jsiArray.c, leading to Denial of Service (DoS). Multiple connected documents corroborate the vulnerability description (heap overflow in Jsish 3.5.0 via jsi_ArraySliceCmd, DoS); h...

CVE-2021-46477

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46477

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46474

CVE-2021-46474 affects Jsish v3.5.0 and is caused by a heap-based buffer overflow in jsiEvalCodeSub (src/jsiEval.c), which can lead to a Denial of Service. Sources across NVD/CNVD/CVELIST describe the issue consistently, with DoS impact; no exploit details are provided in the connected documents....

CVE-2021-46477: Out-of-bounds Write

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12723

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via jsi ArraySliceCmd in src/jsiArray.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, consider disabling the jsi ArraySliceCm...

PT-2022-12729

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via the BooleanConstructor at src/jsiBool.c. Recommendations For Jsish version 3.5.0, at the moment, there is no information about a newer version that contains a f...

PT-2022-12724

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via the RegExp constructor in src/jsiRegexp.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, as a temporary workaround, consid...

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiArraySliceCmd in src/jsiArray.c...

CVE-2021-46480: Out-of-bounds Write

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12728

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via the NumberConstructor at src/jsiNumber.c. Recommendations For Jsish version 3.5.0, consider restricting access to the NumberConstructor function until a patch i...