Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://github.com/Moddable-OpenSource/moddable/issues/752 | third party advisory exploit |
https://github.com/Moddable-OpenSource/moddable/issues/749 | third party advisory exploit |