mJS vulnerabilities

3 known vulnerabilities in mJS from Cesanta. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  mJS: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-86716Sep 8, 2026Cesanta

  A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file src/mjs_tok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been pu

• 7.5 High severity

  Mjs: Out-of-bounds Read

  CVE-2023-49552Jan 2, 2024Cesanta

  An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.c file.

• 9.8 Critical severity

  Mjs: Out-of-bounds Write

  CVE-2023-43338Sep 23, 2023Cesanta

  Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). This vulnerability allows attackers to execute arbitrary code via a crafted input.