CVE-2018-11598

2022-10-0316:21:51

mitre

www.cve.org

espruino

buffer overflow

out-of-bounds read

denial of service

information disclosure

0.001 Low

EPSS

Percentile

45.4%

JSON

Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user crafted input files via a Buffer Overflow or Out-of-bounds Read during syntax parsing of certain for loops in jsparse.c.