critical9.8
CVE-2019-16366
In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated …
Impact
In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moddable | Moddable | Version os180329 |
| Moddable | Xs | Version 9.0.0 |