CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-29368
https://notcve.org/view.php?id=CVE-2022-29368
Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c. Se ha detectado que el commit de Moddable versiones anteriores a 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45, contenía una lectura fuera de límites por medio de la función fxUint8Getter en el archivo /moddable/xs/sources/xsDataView.c • https://github.com/Moddable-OpenSource/moddable/commit/135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 https://github.com/Moddable-OpenSource/moddable/issues/896 • CWE-125: Out-of-bounds Read •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2020-22882
https://notcve.org/view.php?id=CVE-2020-22882
Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafted payload. Fixed in commit 723816ab9b52f807180c99fc69c7d08cf6c6bd61. Se ha detectado un problema en la función fxParserTree de moddable, permite a atacantes causar una denegación de servicio por medio de una carga útil diseñada. Corregido en el commit 723816ab9b52f807180c99fc69c7d08cf6c6bd61 • https://github.com/Moddable-OpenSource/moddable/issues/351 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2020-25465
https://notcve.org/view.php?id=CVE-2020-25465
Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK before OS200908 causes a denial of service (SEGV). Una Desreferencia del Puntero Null en la función xObjectBindingFromExpression en moddable/xs/sources/xsSyntaxical.c:3419 en Moddable SDK versiones anteriores a OS200908 causa una denegación de servicio (SEGV) • https://github.com/Moddable-OpenSource/moddable/issues/442 https://github.com/Moddable-OpenSource/moddable/releases/tag/OS200908 • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2020-25464
https://notcve.org/view.php?id=CVE-2020-25464
Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is only partially initialized because the stack overflowed while creating the frame. This leads to a crash in the code sending the stack frame to the debugger. Un desbordamiento del búfer de la pila en el archivo moddable/xs/sources/xsDebug.c en Moddable SDK versiones anteriores a 20200903. La trama de la pila superior solo se inicializa parcialmente porque la pila se desbordaba mientras se creaba la trama. • https://github.com/Moddable-OpenSource/moddable/issues/431 • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2020-25463
https://notcve.org/view.php?id=CVE-2020-25463
Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV). Un Acceso a la Memoria No Válido en la función fxUTF8Decode en moddable/xs/sources/xsCommon.c:916 en Moddable SDK versiones anteriores a OS200908 causa una denegación de servicio (SEGV) • https://github.com/Moddable-OpenSource/moddable/issues/440 https://github.com/Moddable-OpenSource/moddable/releases/tag/OS200908 •