Moddable Sdk
Vendor:
First CVE: Jan 20, 2022 · Active for 4 years
10
Total CVEs
More Total CVEs than 88% of tracked products
10.0
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 28% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Moddable Sdk over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 20, 2022
4 years ago
Most Recent CVE
Jan 20, 2022
1,646 days ago
CVE Severity & Scoring
Moddable Sdk10 CVEs
60%
40%
All CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local10 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required10 (100.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None10 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-46326HIGH Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy. | Jan 20, 2022 | 7.8 | 25 | NO | NO |
CVE-2021-46335MEDIUM Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance. | Jan 20, 2022 | 5.5 | 20 | NO | NO |
CVE-2021-46334HIGH Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat. | Jan 20, 2022 | 7.8 | 20 | NO | NO |
CVE-2021-46333MEDIUM Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove. | Jan 20, 2022 | 5.5 | 20 | NO | NO |
CVE-2021-46332HIGH Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter. | Jan 20, 2022 | 7.8 | 20 | NO | NO |
CVE-2021-46331MEDIUM Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype. | Jan 20, 2022 | 5.5 | 20 | NO | NO |
CVE-2021-46330MEDIUM Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_prototype_concat. | Jan 20, 2022 | 5.5 | 20 | NO | NO |
CVE-2021-46328HIGH Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main. | Jan 20, 2022 | 7.8 | 20 | NO | NO |
CVE-2021-46327MEDIUM Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort. | Jan 20, 2022 | 5.5 | 20 | NO | NO |
CVE-2021-46329MEDIUM Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini. | Jan 20, 2022 | 5.5 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Moddable Sdk
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 11.5.0 | 10 | 6.4 | 0.8% | 0 | 0 |