Vulnerabilities (CVE)

Filtered by vendor Artifex Subscribe
Filtered by product Mujs
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-30975 1 Artifex 1 Mujs 2022-05-26 4.3 MEDIUM 5.5 MEDIUM
In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp.
CVE-2022-30974 1 Artifex 1 Mujs 2022-05-26 4.3 MEDIUM 5.5 MEDIUM
compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413.
CVE-2018-5759 1 Artifex 1 Mujs 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.
CVE-2018-6191 1 Artifex 1 Mujs 2018-02-09 4.3 MEDIUM 5.5 MEDIUM
The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation.