CVE-2020-22874 – Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish bef

4 years ago

Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22874

Reference (s):

https://github.com/pcmacdon/jsish/commit/858da537bde4de9d8c92466d5a866505310bc328
https://github.com/pcmacdon/jsish/issues/5