Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66010
HistoryJun 22, 2022 - 12:00 a.m.

JerryScript buffer overflow vulnerability

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
17

0.001 Low

EPSS

Percentile

34.9%

JerryScript, a lightweight JavaScript engine from the Jerryscript project, is vulnerable to a buffer overflow vulnerability in JerryScript version 2.4.0, which stems from ecma-helpers.c:326 in ecma_get_lex_env_type when handling untrusted input a boundary error occurs. A remote attacker could exploit this vulnerability to execute arbitrary code on the system.

CPENameOperatorVersion
jerryscript jerryscripteq2.4.0

0.001 Low

EPSS

Percentile

34.9%