PatchTheCVEmoddable sdk vulnerabilities and fixes
Recent CVEs affecting moddable sdk, with upgrade or downgrade steps. 10 tracked.
Also searched as: moddablesdk.
moddable sdk has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-01-20. Highest priority: CVE-2021-46332 (score 48/100).
- CVE-2021-46335 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototy
- CVE-2021-46334 HIGH 7.8 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.
- CVE-2021-46333 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan
- CVE-2021-46332 HIGH 7.8 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Ge
- CVE-2021-46331 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetProt
- CVE-2021-46330 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuf
- CVE-2021-46329 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.
- CVE-2021-46328 HIGH 7.8 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.
- CVE-2021-46327 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_proto
- CVE-2021-46326 HIGH 7.8 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.
FAQ
How do I fix moddable sdk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is moddable sdk being exploited right now?
None of the tracked moddable sdk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which moddable sdk CVE should I patch first?
CVE-2021-46332 currently ranks highest (48/100): Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Ge.