CVE-2019-1010176

2019-07-2513:05:09

dwf

www.cve.org

AI Score

9.9

Confidence

High

EPSS

0.004

Percentile

73.2%

JSON

JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function lit_char_to_utf8_bytes (jerry-core/lit/lit-char-helpers.c:377). The attack vector is: executing crafted javascript code. The fixed version is: after commit 505dace719aebb3308a3af223cfaa985159efae0.

CNA Affected

[
  {
    "product": "JerryScript",
    "vendor": "JerryScript",
    "versions": [
      {
        "status": "affected",
        "version": "commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 [fixed: after commit 505dace719aebb3308a3af223cfaa985159efae0] (as of 2018-09-14)"
      }
    ]
  }
]

References

github.com/jerryscript-project/jerryscript/issues/2476