CVE-2018-1000668

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-09-06 · updated 2026-06-17
Weakness: CWE-125

Description

jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to have been fixed in 2.4.71.

Affected products

Jsish Jsi: 2.4.70_2.047

References

https://jsish.org/fossil/jsi/tktview?name=9602dbd997
https://jsish.org/fossil/jsi/tktview?name=9602dbd997

Get alerted when CVE-2018-1000668 or the next vulnerability affects your stack