Vulnerabilities > Cesanta > MJS > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-12-20 CVE-2023-50044 Classic Buffer Overflow vulnerability in Cesanta MJS 2.22.0
Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.
network
low complexity
cesanta CWE-120
critical
9.8
2023-09-23 CVE-2023-43338 Out-of-bounds Write vulnerability in Cesanta MJS 2.20.0
Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr().
network
low complexity
cesanta CWE-787
critical
9.8