Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.

Published Dec 20, 2023 · Updated Aug 2, 2024 · Assigned by mitre