Zheng Yu

Refactor MCU module

3

- Move MCU from ARCH to OS, `os.run` replaced `arch.run`. - Add FRDM-K64F, Arduino Due board support. - Support save/restore peripheral's context. - Move bitband and remap into peripheral. -...

Function Pointer Hijack mjs/mjs.c in mjs_execute

1

# Function Pointer Hijack mjs/mjs.c in mjs_execute ## Affected Projects mjs 2.20.0 (https://github.com/cesanta/mjs) ## Problem Type CWE-822 (Untrusted Pointer Dereference) ## Description I discovered a vulnerability that could potentially lead...

markdown现在的数学公式比较多样，有必要增加不同的支持。

Bug: Heap Buffer Overflow in the `MD5Importer::LoadMD5MeshFile`

1

## Affected Projects assimp v5.4.3 (https://github.com/assimp/assimp) ## Problem Type CWE-122: Heap-based Buffer Overflow ## Decription **Describe the bug** There is a heap-buffer-overflow vulnerability in the `MD5Importer::LoadMD5MeshFile` function in Assimp. This...

## Affected Projects assimp v5.4.3 (https://github.com/assimp/assimp) ## Problem Type CWE-122: Heap-based Buffer Overflow ## Decription ### Describe the Bug A heap-buffer-overflow vulnerability has been identified in the `OpenDDLParser::parseStructure` function within...

## Affected Projects assimp v5.4.3 (https://github.com/assimp/assimp) ## Problem Type CWE-122: Heap-based Buffer Overflow ## Decription ### Summary A heap-use-after-free (UAF) vulnerability has been identified in the `CallbackToLogRedirector` function within the...

Fix conditional check in `SkipSpaces` function to prevent out-of-bound access

6

#### Description: This PR resolves a potential out-of-bound access issue in the `SkipSpaces` function within the `ParsingUtils.h` file. Previously, the condition that checked for whitespace (`' '` or `'\t'`) was...

## Affected Projects assimp v5.4.3 (https://github.com/assimp/assimp) ## Problem Type CWE-122: Heap-based Buffer Overflow ## Decription ### Summary A segmentation fault (SEGV) was detected in the `SortByPTypeProcess::Execute` function in the Assimp...

Fix https://github.com/wasm3/wasm3/issues/483 This patch ensures that the `type` variable is within the valid range before using it as an index to access the `c_setSetOps` array, thus preventing the global-buffer-overflow error.

Fix Null Pointer Dereference on "main" Function

6

Fix https://github.com/wasm3/wasm3/issues/484 This patch ensures that: 1. `info.message` is not `NULL` before calling `strlen` in `platforms/app/main.c`. 2. `i_runtime->environment` is not `NULL` before calling `Environment_ReleaseCodePages` in `source/m3_env.c`.