Vendors / Moddable Records 25 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 16
Exploited now Moddable records in CISA KEV No Moddable vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddable SDK before OS200903.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01958 · Published 2020-12-04 · No fix listed CWE-787
Priority MEDIUM 45
In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01353 · Published 2019-09-16 · No fix listed CWE-787
Priority LOW 36
Null Pointer Dereference.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01574 · Published 2020-12-04 · No fix listed CWE-476
Priority LOW 35
OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute function at /moddable/xs/sources/xsTree.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00763 · Published 2021-11-19 · No fix listed CWE-770
Priority LOW 35
OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_ArrayBuffer function at /moddable/xs/sources/xsDataView.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00755 · Published 2021-11-19 · No fix listed CWE-787
Priority LOW 35
OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00755 · Published 2021-11-19 · No fix listed CWE-787
Priority LOW 35
OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_String_prototype_repeat function at /moddable/xs/sources/xsString.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00763 · Published 2021-11-19 · No fix listed CWE-787
Priority LOW 35
OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00755 · Published 2021-11-19 · No fix listed CWE-770
Priority LOW 35
Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0111 · Published 2020-12-04 · No fix listed CWE-787
Priority LOW 35
Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01309 · Published 2020-12-04 · No fix listed
Priority LOW 35
Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of service (SEGV).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01309 · Published 2020-12-04 · No fix listed
Priority LOW 35
Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafted payload.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01236 · Published 2021-07-13 · No fix listed CWE-843
Priority LOW 33
Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c.
CVSS 3.1 HIGH 7.1· Local · No auth · User interaction · EPSS 0.00916 · Published 2022-05-12 · No fix listed CWE-125
Priority LOW 33
OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c.
CVSS 3.1 HIGH 7.1· Local · No auth · User interaction · EPSS 0.00734 · Published 2021-11-19 · No fix listed CWE-125
Priority LOW 26
OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp/modwifi.c.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00634 · Published 2021-11-19 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
2 16 7 0 0
THREATIST.IORead the docs