CVE-2021-43453

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parserparseforstatementstart in the js-parser-statm.c file. This issue is similar to CVE-2020-29657...

CVE-2021-43453

Removed by vendor...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. JerryScript 2.4.0 suffers from a buffer error vulnerability that originates from an out-of-bounds read via parserparseforstatementstart in the js-parser-statm.c file...

CVE-2021-43453: Out-of-bounds Read

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parserparseforstatementstart in the js-parser-statm.c file. This issue is similar to CVE-2020-29657...

JerryScript /js-parser-mem.c Denial of Service Vulnerability

JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial-of-service vulnerability in version 3.0.0, which stems from an assertion failure in /parser/js/js-parser-mem.c. An attacker could use this vulnerability to launch a denial of service...

CVE-2021-46337

There is an Assertion 'pagep != NULL' failed at /parser/js/js-parser-mem.cparserlistget in JerryScript 3.0.0...

CVE-2021-46344

There is an Assertion 'flags & PARSERPATTERNHASRESTELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

CVE-2021-46343

CVE-2021-46343 affects JerryScript 3.0.0. The vulnerability is a denial-of-service caused by an assertion failure: Failure: assertion 'context_p->token.type == LEXER_LITERAL' in /jerry-core/parser/js/js-parser-expr.c. Impact: reported as DoS; no further exploit/vector details are provided in t...

PT-2022-12657

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in JerryScript due to a failed check for the 'flags & PARSER PATTERN HAS REST ELEMENT' condition at the /jerry-core/parser/js/js-parser-expr.c location. Recommendations For...

PT-2022-12651

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in JerryScript. Specifically, the assertion 'page p != NULL' fails at the parser list get function in the js-parser-mem.c file. Recommendations For JerryScript...

CVE-2021-46337: Reachable Assertion

There is an Assertion 'pagep != NULL' failed at /parser/js/js-parser-mem.cparserlistget in JerryScript 3.0.0...

PT-2022-12650

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the parser parse class body function at /parser/js/js-parser-expr.c in JerryScript. The assertion opts & PARSER CLASS LITERAL CTOR PRESENT failed...

CVE-2021-46343: Reachable Assertion

There is an Assertion 'contextp-token.type == LEXERLITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in JerryScript 3.0.0, which stems from an assertion in /jerry-core/parser/js/js-parser-expr.c flags & PARSERPATTERNHASRESTELEMENT fails. No details of the vulnerability are currently provided...

PT-2022-12656

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in JerryScript due to the condition 'context p-token.type == LEXER LITERAL' not being met. This issue is located in the file /jerry-core/parser/js/js-parser-expr.c...

CVE-2021-46336: Reachable Assertion

There is an Assertion 'opts & PARSERCLASSLITERALCTORPRESENT' failed at /parser/js/js-parser-expr.cparserparseclassbody in JerryScript 3.0.0...

CVE-2021-46344: Reachable Assertion

There is an Assertion 'flags & PARSERPATTERNHASRESTELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

The vulnerability in the `parser_parse_statements` function of the `js-parser-statm.c` component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform, related to the insufficient use of the `assert()` function, allows a attacker to trigger a service failure.

The vulnerability of the parserparsestatements function in the js-parser-statm.c component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform is related to incorrect comparisons. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the `parser_parse_try_statement_end` function in the `js-parser-statm.c` component of the JavaScript engine for Thingscript and the IoT.js platform, related to the insufficient use of the `assert()` function, allows a attacker to cause a service failure.

The vulnerability of the parserparsetrystatementend function in the js-parser-statm.c component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a remote...

The vulnerability in the `parser_emit_cbc_backward_branch` function of the `js-parser-util.c` component of the JavaScript engine for Internet of Things JerryScript and the IoT.js platform, related to the insufficient use of the `assert()` function, allows a attacker to trigger a service failure.

The vulnerability of the parseremitcbcbackwardbranch function in the js-parser-util.c component of the JavaScript engine for Internet of Things JerryScript and the IoT.js platform is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a remote attacker ...