CVE-2019-16366

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-09-16

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Moddable (Moddable)
• Xs (Moddable)

References

• https://github.com/Moddable-OpenSource/moddable/issues/235