TI-2019-12310 CVE-2019-16366 · GHSA-h8p9-2q3j-5c34In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in…Priority MEDIUM 45In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01353 · Published 2019-09-16 · No fix listed CWE-787