Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-10047
HistoryJan 27, 2022 - 12:00 a.m.

Jerryscript Buffer Overflow Vulnerability (CNVD-2022-10047)

2022-01-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

47.3%

JerryScript, a lightweight JavaScript engine from the JerryScript project, is vulnerable to a buffer overflow vulnerability in v3.0.0 and earlier versions of ecma-helpers.c. The vulnerability stems from a stack-based buffer overflow vulnerability in ecma-helpers.c. An attacker could exploit this vulnerability to execute arbitrary code on the system.

CPENameOperatorVersion
jerryscript jerryscriptlt3.0.0

0.001 Low

EPSS

Percentile

47.3%