Integer overflow

2018-05-3116:29:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

JSON

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflow during syntax parsing. This was addressed by fixing stack size detection on Linux in jsutils.c.

CPENameOperatorVersion
espruinolt1.99

CPE	Name	Operator	Version
	espruino	lt	1.99

References

github.com/espruino/Espruino/commit/a0d7f432abee692402c00e8b615ff5982dde9780

github.com/espruino/Espruino/files/2019243/so_0.txt

github.com/espruino/Espruino/issues/1427