CVE-2018-1000661

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-09-06 · updated 2026-06-17
Weakness: CWE-476

Description

jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been fixed in 2.4.69.

Affected products

Jsish Jsi: 2.4.67

References

https://jsish.org/fossil/jsi/tktview/2adeb066894695b38309d92771aea11c8e0a56a8
https://jsish.org/fossil/jsi/tktview/2adeb066894695b38309d92771aea11c8e0a56a8

Get alerted when CVE-2018-1000661 or the next vulnerability affects your stack