CVE-2021-29329

HIGH

Moddable v10.5.0 - Stack Overflow in fxBinaryExpressionNodeDistribute

Title source: llm

Description

OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute function at /moddable/xs/sources/xsTree.c.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc

https://github.com/Moddable-OpenSource/moddable/issues/587

Scores

CVSS v3 7.8

EPSS 0.0074

EPSS Percentile 49.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-770

Status published

Products (1)

moddable/moddable 10.5.0

Published Nov 19, 2021

Tracked Since Feb 18, 2026