CVE-2021-46332

Moddable SDK v11.5.0 contains a heap-buffer-overflow in xs/sources/xsDataView.c at fxUint8Getter. Affected component is the Moddable SDK (IoT SDK); the overflow can lead to arbitrary code execution per CNVD/CNNVD entries. Public references note the same CVE-2021-46332 across multiple vendors (Red...

CVE-2021-46334

Moddable SDK v11.5.0 contains a stack buffer overflow in the __interceptor_strcat component caused by a boundary error when handling untrusted input. The CVE-2021-46334 entry specifies that this could allow remote code execution, with CVSS indicators in public references showing a potentially imp...

CVE-2021-46326

Summary: Moddable SDK v11.5.0 is affected by a heap-buffer-overflow caused by a boundary error in the __asan_memcpy component when handling untrusted input. This vulnerability could allow a remote attacker to execute arbitrary code on the system. The CNVD entry confirms the issue and impact; no e...

CVE-2021-46328

Moddable SDK v11.5.0 is affected by a heap-buffer-overflow vulnerability in the _libc_start_main component when processing untrusted input. The issue, described in CVE-2021-46328 and corroborated by CNVD-2022-08216 and Red Hat/RH advisories, can allow arbitrary code execution, with impact describ...