CVE-2023-31907: Out-of-bounds Write

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scannerliteraliscreated at /jerry-core/parser/js/js-scanner-util.c...

PT-2023-23511 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0.0 Description: A heap-buffer-overflow issue was discovered in Jerryscript via the component scanner literal is created at /jerry-core/parser/js/js-scanner-util.c. Recommendations: For Jerryscript version 3.0.0, conside...

CVE-2023-31908: Out-of-bounds Write

Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component ecmabuiltintypedarrayprototypesort...

CVE-2023-31906: Out-of-bounds Write

Jerryscript 3.0.0commit 1a2c047 was discovered to contain a heap-buffer-overflow via the component lexercompareidentifiertochars at /jerry-core/parser/js/js-lexer.c...

CVE-2023-31910

CVE-2023-31910 : JerryScript 3.0 contains a heap-buffer-overflow in the parser: parser_parse_function_statement (jerry-core/parser/js/js-parser-statm.c). The issue is described across multiple feeds as a vulnerability in JerryScript 3.0 with high impact (CVSS 3.1: HIGH, LOCAL access, user interac...

CVE-2023-31907

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scannerliteraliscreated at /jerry-core/parser/js/js-scanner-util.c...

CVE-2023-31906

Jerryscript 3.0.0commit 1a2c047 was discovered to contain a heap-buffer-overflow via the component lexercompareidentifiertochars at /jerry-core/parser/js/js-lexer.c...

CVE-2023-31906

CVE-2023-31906 affects JerryScript 3.0.0 (commit 1a2c047). The vulnerability is a heap-buffer-overflow in the JS lexer component, specifically in lexer_compare_identifier_to_chars within /jerry-core/parser/js/js-lexer.c. According to the available documents, this yields a high-severity issue with...

CVE-2023-30410

Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecmaopfunctionconstruct at /operations/ecma-function-object.c...

CVE-2023-30406

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

CVE-2023-30408

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

CVE-2023-30414

Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vmloop at /jerry-core/vm/vm.c...

CVE-2023-30408

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

CVE-2023-30414

Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vmloop at /jerry-core/vm/vm.c...

CVE-2023-30406

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

CVE-2023-30410

Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecmaopfunctionconstruct at /operations/ecma-function-object.c...

CVE-2023-30410

Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecmaopfunctionconstruct at /operations/ecma-function-object.c...

CVE-2023-30408

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

CVE-2023-30414

Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vmloop at /jerry-core/vm/vm.c...

Design/Logic Flaw

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...