JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0, which stems from an out-of-memory issue...

PT-2023-23517 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 1a2c047 Description: An Assertion Failure was discovered in Jerryscript via the jmem heap finalize function at jerry-core/jmem/jmem-heap.c. Recommendations: For Jerryscript version 3.0 commit 1a2c047, consider...

CVE-2023-31919

Removed by vendor...

CVE-2023-31913

Jerryscript 3.0 commit 1a2c047 was discovered to contain an Assertion Failure via the component parserparseclass at jerry-core/parser/js/js-parser-expr.c...

CVE-2023-31913

CVE-2023-31913: JerryScript 3.0 (commit 1a2c047) contains an assertion failure in the parser component parser_parse_class (jerry-core/parser/js/js-parser-expr.c). Documented impact: availability degradation (HIGH) with local attack vector, requires user interaction, no vendor-provided patch detai...

CVE-2023-31914

Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...

CVE-2023-31919

Jerryscript 3.0 commit 05dbbd1 was discovered to contain an Assertion Failure via the jcontextraiseexception at jerry-core/jcontext/jcontext.c...

PT-2023-23521 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 05dbbd1 Description: An Assertion Failure was discovered in Jerryscript via the vm loop at jerry-core/vm/vm.c. Recommendations: For Jerryscript version 3.0 commit 05dbbd1, consider restricting access to the vm...

CVE-2023-31916

Jerryscript 3.0 commit 1a2c047 was discovered to contain an Assertion Failure via the jmemheapfinalize at jerry-core/jmem/jmem-heap.c...

CVE-2023-31916

CVE-2023-31916 affects JerryScript 3.0 (commit 1a2c047). The vulnerability is an Assertion Failure in the jmem_heap_finalize function (jerry-core/jmem/jmem-heap.c). CVSS metrics in the provided records show a local attack vector with low attack complexity, no privileges required, user interaction...

CVE-2023-31920

Jerryscript 3.0 commit 05dbbd1 was discovered to contain an Assertion Failure via the vmloop at jerry-core/vm/vm.c...

CVE-2023-31913

Jerryscript 3.0 commit 1a2c047 was discovered to contain an Assertion Failure via the component parserparseclass at jerry-core/parser/js/js-parser-expr.c...

CVE-2023-31914

Removed by vendor...

CVE-2023-31920

JerryScript CVE-2023-31920 concerns an assertion failure in the vm_loop path (jerry-core/vm/vm.c) affecting JerryScript 3.0 (commit 05dbbd1). The vulnerability is local, with low attack complexity, no privileges required, but requires user interaction and results in a high availability impact (Do...

CVE-2023-31916

Jerryscript 3.0 commit 1a2c047 was discovered to contain an Assertion Failure via the jmemheapfinalize at jerry-core/jmem/jmem-heap.c...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine Jerryscript project . A denial of service vulnerability exists in the JerryScript parserparsefunctionarguments function, which can be exploited by an attacker to cause a denial of service...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine Jerryscript project . A denial of service vulnerability exists in the JerryScript vmloop function, which can be exploited by an attacker to cause a denial of service...

CVE-2023-31914

CVE-2023-31914 affects JerryScript 3.0 (commit 05dbbd1) with an out-of-memory issue in malloc. The connected documents corroborate a memory allocation flaw, implying potential impact on runtime stability/availability, but do not provide concrete exploit details, affected versions beyond 3.0, or a...

CVE-2023-31920

Removed by vendor...

CVE-2023-31918

Removed by vendor...