Lucene search

K
cveMitreCVE-2024-33258
HistoryApr 26, 2024 - 3:15 p.m.

CVE-2024-33258

2024-04-2615:15:49
CWE-119
mitre
web.nvd.nist.gov
27
jerryscript
segmentation violation
vulnerability
vm loop

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

7.2

Confidence

High

EPSS

0

Percentile

9.0%

Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm/vm.c.

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

7.2

Confidence

High

EPSS

0

Percentile

9.0%