CVE-2017-18212

2018-03-0122:29:00

Google

osv.dev

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

55.9%

JSON

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function in lit/lit-char-helpers.c via a RegExp(“[\x0”); payload.

References

github.com/jerryscript-project/jerryscript/issues/2140