Vulnerabilities

TI-2022-11859 CVE-2022-29368 · GHSA-27x5-rrvg-fcg5

Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain…

LOW 33

Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00916 Published 2022-05-12 No fix listed CWE-125

TI-2021-21170 CVE-2021-46334 · GHSA-vh5r-wc55-95x6

Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.

LOW 36

Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00831 Published 2022-01-20 No fix listed CWE-787

TI-2021-21171 CVE-2021-46335 · GHSA-988q-3gg8-f4r5

Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the…

LOW 26

Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00784 Published 2022-01-20 No fix listed CWE-476

TI-2021-21169 CVE-2021-46333 · GHSA-g4r6-gqhm-r23f

Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.

LOW 26

Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00717 Published 2022-01-20 No fix listed CWE-119

TI-2021-21168 CVE-2021-46332 · GHSA-hgwp-3fxv-f6m7

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.

LOW 36

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00953 Published 2022-01-20 No fix listed CWE-787

TI-2021-21167 CVE-2021-46331 · GHSA-qgv7-2wcr-vmm2

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype.

LOW 26

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00717 Published 2022-01-20 No fix listed

TI-2021-21166 CVE-2021-46330 · GHSA-57pr-5x8r-p45v

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via…

LOW 26

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_prototype_concat.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00717 Published 2022-01-20 No fix listed

TI-2021-21165 CVE-2021-46329 · GHSA-wccm-hrj5-mmjf

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.

LOW 26

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00717 Published 2022-01-20 No fix listed

TI-2021-21164 CVE-2021-46328 · GHSA-v545-q372-52wc

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.

LOW 35

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00771 Published 2022-01-20 No fix listed CWE-787

TI-2021-21163 CVE-2021-46327 · GHSA-66fw-g9r2-4h3p

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.

LOW 26

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00717 Published 2022-01-20 No fix listed

TI-2021-21162 CVE-2021-46326 · GHSA-m48x-q5f2-q428

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.

LOW 36

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00871 Published 2022-01-20 No fix listed CWE-787

TI-2021-10097 CVE-2021-29329 · GHSA-pwjr-xrcx-fg7p

OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the…

LOW 35

OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute function at /moddable/xs/sources/xsTree.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00763 Published 2021-11-19 No fix listed CWE-770

TI-2021-10096 CVE-2021-29328 · GHSA-jgc5-v5wh-xr99

OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the…

LOW 33

OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00734 Published 2021-11-19 No fix listed CWE-125

TI-2021-10095 CVE-2021-29327 · GHSA-pmf5-8vqq-p5xq

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the…

LOW 35

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_ArrayBuffer function at /moddable/xs/sources/xsDataView.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00755 Published 2021-11-19 No fix listed CWE-787

TI-2021-10094 CVE-2021-29326 · GHSA-hvvx-8h4f-g7hg

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the…

LOW 35

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00755 Published 2021-11-19 No fix listed CWE-787

TI-2021-10093 CVE-2021-29325 · GHSA-wpwm-p79j-px6r

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the…

LOW 35

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_String_prototype_repeat function at /moddable/xs/sources/xsString.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00763 Published 2021-11-19 No fix listed CWE-787

TI-2021-10092 CVE-2021-29324 · GHSA-2g4w-xqhx-j2x8

OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component…

LOW 35

OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00755 Published 2021-11-19 No fix listed CWE-770

TI-2021-10091 CVE-2021-29323 · GHSA-qq52-whh8-7p62

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the…

LOW 26

OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp/modwifi.c.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00634 Published 2021-11-19 No fix listed CWE-787

TI-2020-14417 CVE-2020-22882 · GHSA-5f7p-5pw7-8j36

Issue was discovered in the fxParserTree function in moddable, allows attackers to cause…

LOW 35

Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafted payload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01236 Published 2021-07-13 No fix listed CWE-843

TI-2020-15563 CVE-2020-25465 · GHSA-2hqr-548x-6625

Null Pointer Dereference.

LOW 36

Null Pointer Dereference.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01574 Published 2020-12-04 No fix listed CWE-476

TI-2020-15562 CVE-2020-25464 · GHSA-2jvc-fw3x-6gp3

Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before…

LOW 35

Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0111 Published 2020-12-04 No fix listed CWE-787

TI-2020-15561 CVE-2020-25463 · GHSA-mmw4-5h79-rrh6

Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable…

LOW 35

Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01309 Published 2020-12-04 No fix listed

TI-2020-15560 CVE-2020-25462 · GHSA-7w6c-5ppj-58vf

Heap buffer overflow in the fxCheckArrowFunction function at…

MEDIUM 46

Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddable SDK before OS200903.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01958 Published 2020-12-04 No fix listed CWE-787

TI-2020-15559 CVE-2020-25461 · GHSA-vqpw-67xr-mj7x

Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in…

LOW 35

Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of service (SEGV).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01309 Published 2020-12-04 No fix listed

TI-2019-12310 CVE-2019-16366 · GHSA-h8p9-2q3j-5c34

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in…

MEDIUM 45

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01353 Published 2019-09-16 No fix listed CWE-787

Vulnerabilities

Filters