CVE-2021-33442

The CVE concerns Cesanta MJS (mJS) embedded JavaScript engine. A NULL pointer dereference in json_printf() (mjs.c) is identified as the underlying flaw. Documented impacts indicate a HIGH availability impact with MEDIUM overall risk (CVSS v3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H), and the vulner...

CVE-2021-33446

CVE-2021-33446 affects Cesanta’s mJS embedded JavaScript engine (mJS/mjs.c). The issue is a NULL pointer dereference in function mjs_next(), leading to a potential crash. Public documentation in the NVD entry notes a MEDIUM base CVSS score (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) with LOCAL attack v...

CVE-2021-33437

CVE-2021-33437 affects the mjs (mJS) embedded JavaScript engine. All connected sources describe memory leaks in the frozen_cb() function of mjs.c. The issue is tied to the ES6 engine and has been documented across multiple feeds (Red Hat, NVD, OSV, CVE lists). One PT Security entry notes that aff...

CVE-2021-33444

CVE-2021-33444 affects the embedded JavaScript engine Cesanta MJS (mJS). The issue is a NULL pointer dereference in the function getprop_builtin_foreign() inside mjs.c, which could lead to a crash or instability in affected builds. The CVE entry, sourced from multiple vendors and databases, consi...

CVE-2021-33445

CVE-2021-33445 affects the Cesanta mJS embedded JavaScript engine (mjs.c) and is caused by a NULL pointer dereference in mjs_string_char_code_at(). The issue is documented across multiple feeds (NVD, Red Hat, OSV, CVE records) with the CVSSv3.1 base score 5.5 (Medium) indicating local access is r...

CVE-2021-33439

CVE-2021-33439 describes an integer overflow in the mjs (mJS: Restricted JavaScript engine) project, specifically in the function gc_compact_strings() within mjs.c. The vulnerability affects the embedded JavaScript engine used in ES6 contexts and is documented across multiple sources (NVD, Red Ha...

CVE-2021-33440

CVE-2021-33440 affects Cesanta MJS (mJS: Restricted JavaScript engine). The issue is a NULL pointer dereference in the function mjs_bcode_commit() within mjs.c , as described across multiple connected records. The vulnerability is documented consistently across NVD and vendor-related feeds, with ...

CVE-2021-33447

CVE-2021-33447 affects Cesanta’s embedded JavaScript engine mJS (mJS) with a NULL pointer dereference in function mjs_print() of file mjs.c . Multiple connected sources (NVD, Red Hat CNS, OSV, CVE catalogs) confirm the issue, described as a NULL pointer dereference in mjs_print(). Impact details ...

CVE-2021-33449

CVE-2021-33449 affects the Cesanta mJS embedded JavaScript engine (mJS) — specifically the mjs_bcode_part_get_by_offset() function in mjs.c, where a NULL pointer dereference is reported. The entry notes a local attack vector with the vulnerability potentially causing an availability impact (crash...

CVE-2021-33438

CVE-2021-33438 : An issue in the mjs (mJS: Restricted JavaScript engine) ES6 engine has a stack buffer overflow in the function json_parse_array() within mjs.c. The vulnerability is documented across multiple feeds (NVD/Red Hat/EUVD/OSV etc.). The vulnerability is described without public exploit...

CVE-2021-33441

The CVE-2021-33441 issue affects Cesanta mJS (mjs.c) in the mJS restricted JavaScript engine. A NULL pointer dereference in exec_expr() is reported, leading to potential crashes (availability impact). The connected records confirm the vulnerability across multiple sources (NVD/Red Hat/Open Source...

CVE-2021-33443

The CVE-2021-33443 entry concerns Cesanta MJS (mJS), the restricted JavaScript engine. The exposed flaw is a stack buffer overflow in the function mjs_execute() within mjs.c. Multiple connected sources (NVD, Red Hat CVE page, OSV, CVE records) consistently describe this same issue across the mJS ...

CVE-2021-33448

The CVE-2021-33448 issue concerns Cesanta MJS (mJS: Restricted JavaScript engine), used in ES6 environments. Multiple connected sources (Red Hat, NVD, OSV, CVE listing) consistently describe a stack buffer overflow at address 0x7fffe9049390. The vulnerability is documented across several feeds, b...