← All advisories

Critical severity9.8NVD Advisory· Published Dec 20, 2023· Updated Jun 17, 2026

CVE-2023-50044

CVE-2023-50044

Description

Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Cesanta/mjs3 versions
cpe:2.3:a:cesanta:mjs:2.22.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:cesanta:mjs:2.22.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =2.20.0

Patches

Vulnerability mechanics

References

2

github.com/cesanta/mjs/pull/255nvdPatch
github.com/cesanta/mjs/issues/254nvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.