CVE-2021-42863

2022-05-1212:33:16

mitre

www.cve.org

buffer overflow

ecma_builtin_typedarray_prototype_filter

unlimited size

AI Score

9.9

Confidence

High

EPSS

0.002

Percentile

51.6%

JSON

A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.

References

github.com/jerryscript-project/jerryscript/issues/4793

github.com/jerryscript-project/jerryscript/pull/4794