Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-16918
HistoryJan 23, 2022 - 12:00 a.m.

Jerryscript stack buffer overflow vulnerability

2022-01-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

34.9%

JerryScript is a lightweight JavaScript engine from the JerryScript project. jerryscript has a stack buffer overflow vulnerability in version 3.0.0, which stems from vm_loop.lto_priv.304 in /jerry-core/vm/vm.c when handling untrusted input with a boundary error. An attacker could exploit this vulnerability to execute arbitrary code on the system.

CPENameOperatorVersion
jerryscript jerryscripteq3.0.0

0.001 Low

EPSS

Percentile

34.9%