PT-2022-12651

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in JerryScript. Specifically, the assertion 'page p != NULL' fails at the parser list get function in the js-parser-mem.c file. Recommendations For JerryScript...

CVE-2021-46337: Reachable Assertion

There is an Assertion 'pagep != NULL' failed at /parser/js/js-parser-mem.cparserlistget in JerryScript 3.0.0...

PT-2022-15718

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description The issue is related to an assertion failure in the js-scanner-util.c file of Jerryscript. The assertion arguments type != SCANNER ARGUMENTS PRESENT && arguments type != SCANNER ARGUMENTS PRESENT NO REG...

PT-2022-12654

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in the scanner scan statement end function at /parser/js/js-scanner.c due to an invalid state. This issue is related to the scanning of statement endings in the JavaScript parse...

PT-2022-12650

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the parser parse class body function at /parser/js/js-parser-expr.c in JerryScript. The assertion opts & PARSER CLASS LITERAL CTOR PRESENT failed...

CVE-2021-46336: Reachable Assertion

There is an Assertion 'opts & PARSERCLASSLITERALCTORPRESENT' failed at /parser/js/js-parser-expr.cparserparseclassbody in JerryScript 3.0.0...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in JerryScript 3.0.0, which stems from an assertion in /jerry-core/parser/js/js-parser-expr.c flags & PARSERPATTERNHASRESTELEMENT fails. No details of the vulnerability are currently provided...

CVE-2021-46343: Reachable Assertion

There is an Assertion 'contextp-token.type == LEXERLITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

PT-2022-12656

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in JerryScript due to the condition 'context p-token.type == LEXER LITERAL' not being met. This issue is located in the file /jerry-core/parser/js/js-parser-expr.c...

CVE-2020-23315: Undefined Security Weakness

There is an ASSERTION pFuncBody-GetYieldRegister == oldYieldRegister failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta...

Design/Logic Flaw

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

CVE-2021-46170

CVE-2021-46170 describes a Use-After-Free in JerryScript’s lexer_compare_identifier_to_string (js-lexer.c) from commit a6ab5e9. The vulnerability is reported across multiple feeds (NVD, OSV, CNVD, UBuntu OSV, Debian, etc.). Affected component is the JerryScript JavaScript engine; root cause is a ...

CVE-2021-46170

Removed by vendor...

PT-2022-12602

Name of the Vulnerable Software and Affected Versions JerryScript version a6ab5e9 Description An issue was discovered in the js-lexer.c file, specifically in the lexer compare identifier to string function, where there is a Use-After-Free. Recommendations For JerryScript version a6ab5e9, consider...

CVE-2021-46170: Use After Free

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

XSS vulnerability in translations

Summary An attacker with admin privileges and access to Translations management functionality may add JS payload to translation values via: - Translation management UI. - Translations downloaded via the Crowdin service may also contain JS strings used for XSS attacks, for a successful attack...

GHSA-RRGW-3HG3-9X8C XSS vulnerability in translations

Summary An attacker with admin privileges and access to Translations management functionality may add JS payload to translation values via: - Translation management UI. - Translations downloaded via the Crowdin service may also contain JS strings used for XSS attacks, for a successful attack...