Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66011
HistoryJun 22, 2022 - 12:00 a.m.

JerryScript memory mis-reference vulnerability

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
jerryscript
javascript
version 2.4.0
memory misreference
vulnerability
ecma-helpers
string.c

EPSS

0.001

Percentile

34.8%

JerryScript is a lightweight JavaScript engine from the Jerryscript project. version 2.4.0 of JerryScript is vulnerable to a memory misquoting vulnerability that originates in ecma-helpers- in ecma_compare_ecma_non_direct_strings. string.c:1940, which is responsible for freeing memory, is garbled. An attacker could exploit this vulnerability to potentially cause program crashes, arbitrary code execution, etc.

EPSS

0.001

Percentile

34.8%