CVE-2019-16366

CVE-2019-16366 affects XS 9.0.0 in Moddable SDK OS180329. The issue is a heap-based buffer overflow in fxBeginHost (xsAPI.c) when invoked via fxRunDefine (xsRun.c). This is demonstrated by crafted JavaScript code to xst. The connected Red Hat/OSV entries corroborate the same description. Public e...