moddable vulnerabilities

Recent CVEs affecting moddable products. 24 tracked.

moddable has 24 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2022-05-12. Highest priority: CVE-2020-25462 (score 64/100).

• CVE-2022-29368 HIGH 7.1 UPGRADE Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds rea
• CVE-2021-46335 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototy
• CVE-2021-46334 HIGH 7.8 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.
• CVE-2021-46333 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan
• CVE-2021-46332 HIGH 7.8 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Ge
• CVE-2021-46331 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetProt
• CVE-2021-46330 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuf
• CVE-2021-46329 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.
• CVE-2021-46328 HIGH 7.8 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.
• CVE-2021-46327 MEDIUM 5.5 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_proto
• CVE-2021-46326 HIGH 7.8 DOWNGRADE Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.
• CVE-2021-29329 HIGH 7.8 DOWNGRADE OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute
• CVE-2021-29328 HIGH 7.1 DOWNGRADE OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddab
• CVE-2021-29327 HIGH 7.8 DOWNGRADE OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_ArrayBuffer function at
• CVE-2021-29326 HIGH 7.8 DOWNGRADE OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /
• CVE-2021-29325 HIGH 7.8 DOWNGRADE OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_String_prototype_repeat
• CVE-2021-29324 HIGH 7.8 DOWNGRADE OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/
• CVE-2021-29323 MEDIUM 5.5 DOWNGRADE OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/networ
• CVE-2020-25465 HIGH 7.5 UPGRADE Null Pointer Dereference
• CVE-2020-25464 HIGH 7.5 UPGRADE Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903
• CVE-2020-25463 HIGH 7.5 UPGRADE Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 ca
• CVE-2020-25462 CRITICAL 9.8 UPGRADE Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddab
• CVE-2020-25461 HIGH 7.5 UPGRADE Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS
• CVE-2020-22882 HIGH 7.5 UPGRADE Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via

FAQ

How do I fix moddable vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is moddable being exploited right now?

None of the tracked moddable CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which moddable CVE should I patch first?

CVE-2020-25462 currently ranks highest (64/100): Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddab.

Products

• moddable
• moddable sdk

RSS feed for moddable · ← Back to latest CVEs