CVE-2021-46349

Affected software: JerryScript 3.0.0. Vulnerability and root cause: An assertion fails in /jerry-core/ecma/operations/ecma-objects.c with the condition type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY, exposing a denial‑of‑service scenario. The issue is documented across multipl...

CVE-2021-46350

There is an Assertion 'ecmaisvalueobject value' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in JerryScript 3.0.0...

CVE-2021-46350

Removed by vendor...

CVE-2021-46349

Removed by vendor...

CVE-2021-46347

CVE-2021-46347 affects JerryScript 3.0.0, where an assertion in /jerry-core/ecma/operations/ecma-objects.c: ecma_object_check_class_name_is_object(obj_p) can fail. This is a core vulnerability in the JerryScript ECMA objects implementation and is documented across several feeds (NVD/NSS/Nessie-li...

CVE-2021-46348

The CVE-2021-46348 entry concerns JerryScript 3.0.0, where a denial-of-service condition arises from the assertion ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) failing in /jerry-core/ecma/base/ecma-literal-storage.c. The connected sources confirm the vulnerable component and file, and describe the...

CVE-2021-46348

There is an Assertion 'ECMASTRINGISREFEQUALSTOONE stringp' failed at /jerry-core/ecma/base/ecma-literal-storage.c in JerryScript 3.0.0...

CVE-2021-46347

There is an Assertion 'ecmaobjectcheckclassnameisobject objp' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0...

CVE-2021-46347

Removed by vendor...

CVE-2021-46348

Removed by vendor...

CVE-2021-46346

Removed by vendor...

CVE-2021-46346

There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.cecmabuiltindateprototypedispatchset:421 in JerryScript 3.0.0...

CVE-2021-46346

CVE-2021-46346 affects JerryScript 3.0.0, due to an assertion failure in the date prototype dispatch Set handler: local_tza must equal ecma_date_local_time_zone_adjustment (date_value). The description notes an assertion failure in /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c (e...

CVE-2021-46345

There is an Assertion 'cesu8cursorp == cesu8endp' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0...

CVE-2021-46344

Removed by vendor...

CVE-2021-46345

Removed by vendor...

CVE-2021-46345

Technical details such as affected products, versions, root cause, and remediation are not publicly provided in the connected documents. Monitor for updates.

CVE-2021-46344

CVE-2021-46344 affects JerryScript 3.0.0. The issue is described as an assertion failure: 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' in /jerry-core/parser/js/js-parser-expr.c. The connected documents confirm the same core problem but do not provide additional technical details such as broader affe...

CVE-2021-46344

There is an Assertion 'flags & PARSERPATTERNHASRESTELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

CVE-2021-46343

CVE-2021-46343 affects JerryScript 3.0.0. The vulnerability is a denial-of-service caused by an assertion failure: Failure: assertion 'context_p->token.type == LEXER_LITERAL' in /jerry-core/parser/js/js-parser-expr.c. Impact: reported as DoS; no further exploit/vector details are provided in t...