Global Buffer Overflow in Cesanta MJS by Cesanta
CVE-2021-46526

7.8HIGH

Key Information:

Vendor

Cesanta

Status
Mjs
Vendor
CVE Published:
27 January 2022

What is CVE-2021-46526?

The Cesanta MJS version 2.20.0 is susceptible to a global buffer overflow vulnerability that arises from improper handling in the snquote function within the src/mjs_json.c file. This flaw can potentially allow an attacker to exploit the overflow, which may result in unexpected behavior, memory corruption, or unauthorized code execution, posing significant risks to systems utilizing this version of MJS.

References

https://github.com/cesanta/mjs/issues/191
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.