CVE-2020-25464

High

Description

Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is only partially initialized because the stack overflowed while creating the frame. This leads to a crash in the code sending the stack frame to the debugger.

SeverityHigh
CVSS7.5
Exploit probability—
ProductModdable
PublishedDec 4, 2020
First seenDec 4, 2020

How to fix

Update
  • moddable moddableos200903 or later

Affected products

ProductAffected versionsFixed in
moddable moddablev < os200903os200903

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.