CVE-2018-1000668

jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to have been fixed in 2.4.71.

• CWE-125

• https://jsish.org/fossil/jsi/tktview?name=9602dbd997Patch, Vendor Advisory
• https://jsish.org/fossil/jsi/tktview?name=9602dbd997Patch, Vendor Advisory

Published

Sep 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000662Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000663jsish version 2.4.70 2.047 contains a Buffer Overflow vulner…
• CVE-2018-1000664daneren2005 DSub for Subsonic (Android client) version 5.4.1…
• CVE-2018-1000665Dojo Dojo Objective Harness (DOH) version prior to version 1…
• CVE-2018-1000666GIG Technology NV JumpScale Portal 7 version before commit 1…
• CVE-2018-1000667NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlie…
• CVE-2018-1000669KOHA Library System version 16.11.x (up until 16.11.13) and …
• CVE-2018-1000670KOHA Library System version 16.11.x (up until 16.11.13) and …
• CVE-2018-1000671sympa version 6.2.16 and later contains a CWE-601: URL Redir…
• CVE-2018-1000672Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000673Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-1000773WordPress version 4.9.8 and earlier contains a CWE-20 Input …