Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08365
HistoryJan 23, 2022 - 12:00 a.m.

Espruino Buffer Overflow Vulnerability (CNVD-2022-08365)

2022-01-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

34.9%

Espruino is a JavaScript interpreter. It is designed for devices with only 128kB flash and 8kB RAM.Espruino is vulnerable to a buffer overflow vulnerability in version 2.10.246, which stems from a boundary error in vcbprintf via src jsutils.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system.

CPENameOperatorVersion
espruino espruinoeq2.10.246

0.001 Low

EPSS

Percentile

34.9%

Related for CNVD-2022-08365