CVE-2017-18212

2018-03-0121:00:00

mitre

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

55.9%

JSON

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function in lit/lit-char-helpers.c via a RegExp(“[\x0”); payload.

References

github.com/jerryscript-project/jerryscript/issues/2140