{"id":"CVE-2021-33797","details":"Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d.","modified":"2026-07-09T05:14:03.273421Z","published":"2023-04-17T22:15:07.677Z","references":[{"type":"REPORT","url":"https://github.com/ccxvii/mujs/issues/148"},{"type":"FIX","url":"https://github.com/ccxvii/mujs/commit/833b6f1672b4f2991a63c4d05318f0b84ef4d550"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ccxvii/mujs","events":[{"introduced":"4792d16f17b15a1eca3c2a9c856dc13fda1d23c5"},{"last_affected":"6d1404397f3c3433334418f56048bead007729ac"},{"fixed":"833b6f1672b4f2991a63c4d05318f0b84ef4d550"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:artifex:mujs:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.1"},{"last_affected":"1.1.1"}]}}],"versions":["1.1.1","1.1.0","1.0.9","1.0.8","1.0.7","1.0.6","1.0.5","1.0.4","1.0.3","1.0.2","1.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33797.json","vanir_signatures_modified":"2026-07-09T05:14:03Z","vanir_signatures":[{"source":"https://github.com/ccxvii/mujs/commit/833b6f1672b4f2991a63c4d05318f0b84ef4d550","target":{"file":"jsdtoa.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["288979091544294782111518819104233456394","61581765318884466210923875556097423407","33659201827772043129384467252092958873","10652266890852190394524829872989947004","67837103942097848649576271900656043397","294322422671747322356550470135510402828","103767349172362287088416722015036295073"]},"id":"CVE-2021-33797-6cc29e16","signature_type":"Line","signature_version":"v1"},{"digest":{"length":2020,"function_hash":"124021268302342966659032939690289369075"},"id":"CVE-2021-33797-be8d4644","signature_type":"Function","signature_version":"v1","source":"https://github.com/ccxvii/mujs/commit/833b6f1672b4f2991a63c4d05318f0b84ef4d550","target":{"function":"js_strtod","file":"jsdtoa.c"},"deprecated":false}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}