CVE-2021-46326

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.

Source: CVE-2021-46326

CVE-2021-46337

There is an Assertion ‘page_p != NULL’ failed at /parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0.

Source: CVE-2021-46337

CVE-2021-46325

Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.

Source: CVE-2021-46325

CVE-2021-46329

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.

Source: CVE-2021-46329

CVE-2021-46336

There is an Assertion ‘opts & PARSER_CLASS_LITERAL_CTOR_PRESENT’ failed at /parser/js/js-parser-expr.c(parser_parse_class_body) in JerryScript 3.0.0.

Source: CVE-2021-46336

CVE-2021-46323

Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass.

Source: CVE-2021-46323

CVE-2021-46345

There is an Assertion ‘cesu8_cursor_p == cesu8_end_p’ failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0.

Source: CVE-2021-46345

CVE-2021-46324

Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.

Source: CVE-2021-46324

CVE-2021-46332

Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.

Source: CVE-2021-46332

CVE-2021-46333

Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.

Source: CVE-2021-46333