Filtered by vendor Artifex Subscriptions
Filtered by product Mujs Subscriptions
Total 30 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-33796 1 Artifex 1 Mujs 2024-11-21 10 Critical
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.
CVE-2020-24343 1 Artifex 1 Mujs 2024-11-21 7.8 High
Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c.
CVE-2020-22886 1 Artifex 1 Mujs 2024-11-21 7.5 High
Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to cause a denial of service.
CVE-2020-22885 1 Artifex 1 Mujs 2024-11-21 7.5 High
Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of service.
CVE-2019-12798 1 Artifex 1 Mujs 2024-11-21 N/A
An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflow of the parsed syntax list size.
CVE-2019-11413 1 Artifex 1 Mujs 2024-11-21 N/A
An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check.
CVE-2019-11412 2 Artifex, Fedoraproject 2 Mujs, Fedora 2024-11-21 7.5 High
An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call.
CVE-2019-11411 1 Artifex 1 Mujs 2024-11-21 N/A
An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer overflow.
CVE-2018-6191 1 Artifex 1 Mujs 2024-11-21 N/A
The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation.
CVE-2018-5759 1 Artifex 1 Mujs 2024-11-21 N/A
jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.