VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Aug 20, 2018· Updated Jun 17, 2026

CVE-2018-1000655

CVE-2018-1000655

Description

Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsi_ValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault. This attack appear to be exploitable via a crafted javascript code. This vulnerability appears to have been fixed in 2.4.67.

Affected products

3
  • Jsish/Jsishllm-fuzzy2 versions
    2.4.65+ 1 more
    • (no CPE)range: 2.4.65
    • cpe:2.3:a:jsish:jsish:2.4.65:*:*:*:*:*:*:*
  • Pcmanticore/Jsiinferred
    Range: <=2.4.65

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.