← Back

Moddable

moddable

25 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Moddable
moddable
Moddable Sdk
moddable_sdk
Xs
xs

CVEs (25)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Moddable
1Moddable
Jun 17, 2026
May 12, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c.
1Moddable
1Moddable Sdk
Jun 17, 2026
Jan 20, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance.
1Moddable
1Moddable Sdk
Jun 17, 2026
Jan 20, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.
1Moddable
1Moddable Sdk
Jun 17, 2026
Jan 20, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.
1Moddable
1Moddable Sdk
Jun 17, 2026
Jan 20, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.
1Moddable
1Moddable Sdk
Jun 17, 2026
Jan 20, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype.
1Moddable
1Moddable Sdk
Jun 17, 2026
Jan 20, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_prototype_concat.
1Moddable
1Moddable Sdk
Jun 17, 2026
Jan 20, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.
1Moddable
1Moddable Sdk
Jun 17, 2026
Jan 20, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.
1Moddable
1Moddable Sdk
Jun 17, 2026
Jan 20, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.
1Moddable
1Moddable Sdk
Jun 17, 2026
Jan 20, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.
1Moddable
1Moddable
Jun 17, 2026
Nov 19, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute function at /moddable/xs/sources/xsTree.c.
1Moddable
1Moddable
Jun 17, 2026
Nov 19, 2021
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c.
1Moddable
1Moddable
Jun 17, 2026
Nov 19, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_ArrayBuffer function at /moddable/xs/sources/xsDataView.c.
1Moddable
1Moddable
Jun 17, 2026
Nov 19, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c.
1Moddable
1Moddable
Jun 17, 2026
Nov 19, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_String_prototype_repeat function at /moddable/xs/sources/xsString.c.
1Moddable
1Moddable
Jun 17, 2026
Nov 19, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c.
1Moddable
1Moddable
Jun 17, 2026
Nov 19, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp/modwifi.c.
1Moddable
1Moddable
Jun 17, 2026
Jul 13, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Issue was discovered in the fxParserTree function in moddable, allows attackers to cause denial of service via a crafted payload. Fixed in commit 723816ab9b52f807180c99fc69c7d08cf6c6bd61.
1Moddable
1Moddable
Jun 17, 2026
Dec 4, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK before OS200908 causes a denial of service (SEGV).