JerryScript Security Vulnerability

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0 that originates from allowing remote attackers to execute arbitrary code via the ecmastringbuilderappendraw component in...

CVE-2023-36109

Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecmastringbuilderappendraw component at /jerry-core/ecma/base/ecma-helpers-string.c...

CVE-2023-36109

Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecmastringbuilderappendraw component at /jerry-core/ecma/base/ecma-helpers-string.c...

CVE-2023-36109

CVE-2023-36109 affects JerryScript 3.0; the vulnerability is a buffer overflow in ecma_stringbuilder_append_raw (/jerry-core/ecma/base/ecma-helpers-string.c) that can allow remote code execution. Several connected sources document unpatched status in Linux distributions (no vendor patch available...

CVE-2023-36109

Removed by vendor...

PT-2023-25431 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: JerryScript version 3.0 Description: The issue allows remote attackers to execute arbitrary code via the ecma stringbuilder append raw component at /jerry-core/ecma/base/ecma-helpers-string.c. This is a Buffer Overflow vulnerability...

CVE-2023-38961

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...

CVE-2023-38961

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...

CVE-2023-38961

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...

CVE-2023-38961

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...

UBUNTU-CVE-2023-38961

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...

CVE-2023-38961

CVE-2023-38961 concerns a buffer overflow in JerryScript’s jerryscript v3.0.0. The vulnerability is triggered via the scanner_is_context_needed function in js-scanner-until.c, allowing a remote attacker to execute arbitrary code. Affected product/version: jerryscript 3.0.0. Reported impact is hig...

PT-2023-26705 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: jerryscript version 3.0.0 Description: A Buffer Overflow issue allows a remote attacker to execute arbitrary code via the scanner is context needed component in js-scanner-until.c. This enables the attacker to potentially gain control over th...

CVE-2023-38961

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...

CVE-2023-38961

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanneriscontextneeded component in js-scanner-until.c...

CVE-2023-38961

Removed by vendor...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in jerryscript version v.3.0.0, which stems from the presence of a buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via the...

UBUNTU-CVE-2020-24187

An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service DoS Null Pointer Dereference...

CVE-2020-24187

An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service DoS Null Pointer Dereference...

CVE-2020-24187

JerryScript CVE-2020-24187 affects ecma-helpers.c in jerryscript 2.3.0. The issue allows a local attacker to trigger a denial of service via a Null Pointer Dereference. Documented impact is local DoS; no patch/version remediation details are provided across the connected sources.