Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 25

Export CSV
CVE-2020-25463

Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV).

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Moddable
Products
Moddable
CVE-2020-25462

Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddable SDK before OS200903.

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed
Vendors
Moddable
Products
Moddable
CVE-2020-25461

Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of service (SEGV).

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Moddable
Products
Moddable
CVE-2020-22882

Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafted payload. Fixed in commit 723816ab9b52f807180c99fc69c7d08cf6c6bd61.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Moddable
Products
Moddable
CVE-2019-16366

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Moddable
Products
Moddable Xs