CVE-2020-25464

    Dashboard / Vulnerabilities / CVE-2020-25464

    CVE-2020-25464

    Published: 4 Dec 2020Last Modified: 8 Jul 2026

    Summary:

    Details: Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is only partially initialized because the stack overflowed while creating the frame. This leads to a crash in the code sending the stack frame to the debugger.

    References: https://github.com/Moddable-OpenSource/moddable/issues/431

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -5639abb24b6d725554969dc0be5822edb54a4a08

    Affected versions

    OS200831

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-25464 | CVE-DB