CVE-2018-11591

2018-05-3116:00:00

mitre

www.cve.org

espruino

denial of service

input file

null pointer dereference

syntax parsing

validation

debug trace

jsvar.

EPSS

0.001

Percentile

33.5%

JSON

Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via a NULL pointer dereference during syntax parsing. This was addressed by adding validation for a debug trace print statement in jsvar.c.