p PatchFirst

CVE-2021-33797

CVE-2021-33797

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d.

CVSS 9.8 · Critical · EPSS 0.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • mujs

    Versions
    • mujs in versions 1.0.1 to 1.1.1: Affected

    No fix published

  • mujs Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.1.3-2

    Update to 1.1.3-2

  • mujs Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.1.3-2

    Update to 1.1.3-2

  • mujs Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.1.3-2

    Update to 1.1.3-2

Original sources

Check your server →