CVE-2021-46486

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0

Description The issue is related to a SEGV vulnerability via the jsi ArraySpliceCmd function at src/jsiArray.c. This can lead to a Denial of Service (DoS).

Recommendations For Jsish version 3.5.0, consider disabling the jsi ArraySpliceCmd function as a temporary workaround until a patch is available. Restrict access to the src/jsiArray.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.