CVE-2023-29570

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.29% chance of exploitation in the next 30 days, 20th percentile

Published

2023-04-24

Updated

2025-02-04

Proof-of-concept exploits (2)

• cesanta/mjs/issues/2402059★ · 2026-09-30
• z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_fii2/readme.md2★ · 2023-04-27

References

• CVE Record
• NVD entry