CVE-2021-46506

There is an Assertion ‘v->d.lval != v’ failed at src/jsiValue.c in Jsish v3.5.0.

Source: CVE-2021-46506

CVE-2021-46501

Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS).

Source: CVE-2021-46501

CVE-2021-46517

There is an Assertion `mjs_stack_size(&mjs->scopes) > 0′ failed at src/mjs_exec.c in Cesanta MJS v2.20.0.

Source: CVE-2021-46517

CVE-2021-46500

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ArgTypeCheck in src/jsiFunc.c. This vulnerability can lead to a Denial of Service (DoS).

Source: CVE-2021-46500

CVE-2021-46515

There is an Assertion `mjs_stack_size(&mjs->scopes) >= scopes_len’ failed at src/mjs_exec.c in Cesanta MJS v2.20.0.

Source: CVE-2021-46515

CVE-2021-46503

Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x79732. This vulnerability can lead to a Denial of Service (DoS).

Source: CVE-2021-46503

CVE-2021-46516

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_stack_size at mjs/src/mjs_core.c. This vulnerability can lead to a Denial of Service (DoS).

Source: CVE-2021-46516

CVE-2021-46505

Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5b1e5.

Source: CVE-2021-46505

CVE-2021-46508

There is an Assertion `i < parts_cnt’ failed at src/mjs_bcode.c in Cesanta MJS v2.20.0.

Source: CVE-2021-46508

CVE-2021-46509

Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs_json.c.

Source: CVE-2021-46509