Lucene search

K
osvGoogleOSV:GHSA-JGRP-6QQQ-3284
HistoryMay 24, 2022 - 7:20 p.m.

Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption

2022-05-2419:20:22
Google
osv.dev
21
chakracore
memory corruption
out-of-bounds
microsoft
cve-2021-42279
chakra scripting engine

EPSS

0.029

Percentile

90.9%

Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due to an out-of-bounds write. The Microsoft advisory for CVE-2021-42279 was modified in August 2022 to include Microsoft.ChakraCore as an affected product.