Gordon Williams

3 exploits Active since May 2018
CVE-2018-11596 WRITEUP MEDIUM WRITEUP
Espruino < 1.99 - Memory Corruption
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because a check for '\0' is made for the wrong array element in jsvar.c.
CVSS 5.5
CVE-2018-11597 WRITEUP MEDIUM WRITEUP
Espruino < 1.99 - Buffer Overflow
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because of a missing check for stack exhaustion with many '{' characters in jsparse.c.
CVSS 5.5
CVE-2022-25044 WRITEUP HIGH WRITEUP
Espruino - Out-of-Bounds Write
Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.
CVSS 7.8