CVE-2023-29569
https://notcve.org/view.php?id=CVE-2023-29569
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS). • https://github.com/cesanta/mjs/issues/239 https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_ffi/readme.md •
CVE-2023-29571
https://notcve.org/view.php?id=CVE-2023-29571
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS). • https://github.com/cesanta/mjs/issues/241 https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_gc/readme.md •
CVE-2021-36535
https://notcve.org/view.php?id=CVE-2021-36535
Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf. • https://github.com/cesanta/mjs/issues/175 • CWE-787: Out-of-bounds Write •
CVE-2021-33443
https://notcve.org/view.php?id=CVE-2021-33443
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mjs.c. Se ha detectado un problema en mjs (mJS: motor de JavaScript restringido), ES6 (versión 6 de JavaScript). Se presenta un desbordamiento del búfer de pila en la función mjs_execute() en el archivo mjs.c. • https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d https://github.com/cesanta/mjs/issues/167 • CWE-787: Out-of-bounds Write •
CVE-2021-33444
https://notcve.org/view.php?id=CVE-2021-33444
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_foreign() in mjs.c. Se ha detectado un problema en mjs (mJS: motor de JavaScript restringido), ES6 (versión 6 de JavaScript). Se presenta una desreferencia de puntero NULL en la función getprop_builtin_foreign() en el archivo mjs.c. • https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d https://github.com/cesanta/mjs/issues/166 • CWE-476: NULL Pointer Dereference •