CVE-2018-11591

Espruino before version 1.98 is affected by a denial-of-service vulnerability caused by a NULL pointer dereference during syntax parsing when processing a crafted input file. Multiple connected sources confirm that the issue exists in Espruino 1.97 and earlier, and it was mitigated by adding vali...

CVE-2018-11592

CVE-2018-11592 affects Espruino before version 1.98. The vulnerability arises from an out-of-bounds read during syntax parsing due to missing height validation in libs/graphics/jswrap_graphics.c, which can be triggered by a specially crafted input file and leads to an application crash (Denial of...

CVE-2018-11595

Espruino before 1.99 allows attackers to cause a denial of service application crash and a potential Escalation of Privileges with a user crafted input file via a Buffer Overflow during syntax parsing, because strncat is misused...

CVE-2018-11590

Espruino before 1.99 allows attackers to cause a denial of service application crash with a user crafted input file via an integer overflow during syntax parsing. This was addressed by fixing stack size detection on Linux in jsutils.c...

CVE-2018-11594

Espruino before 1.99 allows attackers to cause a denial of service application crash with a user crafted input file via a Buffer Overflow during syntax parsing of "VOID" tokens in jsparse.c...

CVE-2018-11592

Espruino before 1.98 allows attackers to cause a denial of service application crash with a user crafted input file via an Out-of-bounds Read during syntax parsing in which certain height validation is missing in libs/graphics/jswrapgraphics.c...

CVE-2018-11590

Espruino before 1.99 allows attackers to cause a denial of service application crash with a user crafted input file via an integer overflow during syntax parsing. This was addressed by fixing stack size detection on Linux in jsutils.c...

CVE-2018-11591

Espruino before 1.98 allows attackers to cause a denial of service application crash with a user crafted input file via a NULL pointer dereference during syntax parsing. This was addressed by adding validation for a debug trace print statement in jsvar.c...

CVE-2018-11597

Summary: CVE-2018-11597 affects Espruino versions before 1.99. A vulnerability in jsparse.c allows a crafted input file with many '{' characters to trigger a Buffer Overflow during syntax parsing, causing an application crash (DoS). Root cause: missing check for stack exhaustion. Exploitation con...

CVE-2018-11597

Espruino before 1.99 allows attackers to cause a denial of service application crash with a user crafted input file via a Buffer Overflow during syntax parsing because of a missing check for stack exhaustion with many '' characters in jsparse.c...

CVE-2018-11591

Espruino before 1.98 allows attackers to cause a denial of service application crash with a user crafted input file via a NULL pointer dereference during syntax parsing. This was addressed by adding validation for a debug trace print statement in jsvar.c...

CVE-2018-11594: Improper Restriction of Operations within the Bounds of a Memory Buffer

Espruino before 1.99 allows attackers to cause a denial of service application crash with a user crafted input file via a Buffer Overflow during syntax parsing of "VOID" tokens in jsparse.c...

PT-2018-10694

Name of the Vulnerable Software and Affected Versions Espruino versions prior to 1.99 Description The issue allows attackers to cause a denial of service, resulting in an application crash, and potentially escalate privileges. This is achieved by providing a user-crafted input file that exploits ...

CVE-2018-11591: NULL Pointer Dereference

Espruino before 1.98 allows attackers to cause a denial of service application crash with a user crafted input file via a NULL pointer dereference during syntax parsing. This was addressed by adding validation for a debug trace print statement in jsvar.c...

CVE-2018-11596: Improper Restriction of Operations within the Bounds of a Memory Buffer

Espruino before 1.99 allows attackers to cause a denial of service application crash with a user crafted input file via a Buffer Overflow during syntax parsing because a check for '\0' is made for the wrong array element in jsvar.c...

PT-2018-10692

Name of the Vulnerable Software and Affected Versions Espruino versions prior to 1.99 Description The issue allows attackers to cause a denial of service, potentially leading to an application crash, and may also result in information disclosure. This is achieved through a buffer overflow during...

PT-2018-10690

Name of the Vulnerable Software and Affected Versions Espruino versions prior to 1.98 Description The issue allows attackers to cause a denial of service, resulting in an application crash, by providing a user-crafted input file. This crash occurs due to a NULL pointer dereference during syntax...

PT-2018-10695

Name of the Vulnerable Software and Affected Versions Espruino versions prior to 1.99 Description The issue allows attackers to cause a denial of service, resulting in an application crash, by providing a user-crafted input file. This is due to a Buffer Overflow that occurs during syntax parsing...

PT-2018-10689

Name of the Vulnerable Software and Affected Versions Espruino versions prior to 1.99 Description The issue allows attackers to cause a denial of service, resulting in an application crash, by providing a user-crafted input file. This is due to an integer overflow that occurs during syntax parsin...

PT-2018-4732

Name of the Vulnerable Software and Affected Versions sequelize versions prior to 1.7.0-alpha3 Description The issue concerns a SQL Injection vulnerability due to the use of incorrect escape syntax when connecting to SQLite databases. Specifically, affected versions of sequelize use MySQL's...