9954 matches found
CVE-2021-46342: Reachable Assertion
There is an Assertion 'ecmaislexicalenvironment objp || !ecmaopobjectisfastarray objp' failed at /jerry-core/ecma/base/ecma-helpers.c in JerryScript 3.0.0...
CVE-2021-46350: Reachable Assertion
There is an Assertion 'ecmaisvalueobject value' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in JerryScript 3.0.0...
PT-2022-12650
Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the parser parse class body function at /parser/js/js-parser-expr.c in JerryScript. The assertion opts & PARSER CLASS LITERAL CTOR PRESENT failed...
PT-2022-12655
Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the JerryScript code. Specifically, the assertion 'ecma is lexical environment obj p || !ecma op object is fast array obj p' failed at the location...
PT-2022-12664
Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the ecma builtin date prototype dispatch set function at line 421 in the ecma-builtin-date-prototype.c file. The assertion local tza == ecma date local time...
CVE-2021-46340: Reachable Assertion
There is an Assertion 'contextp-stacktopuint8 == SCANSTACKTRYSTATEMENT || contextp-stacktopuint8 == SCANSTACKCATCHSTATEMENT' failed at /parser/js/js-scanner.cscannerscanstatementend in JerryScript 3.0.0...
CVE-2021-46346: Reachable Assertion
There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.cecmabuiltindateprototypedispatchset:421 in JerryScript 3.0.0...
CVE-2021-46351: Reachable Assertion
There is an Assertion 'localtza == ecmadatelocaltimezoneadjustment datevalue' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.cecmabuiltindateprototypedispatchset:421 in JerryScript 3.0.0...
JerryScript security vulnerabilities
JerryScript, a lightweight JavaScript engine from the JerryScript project, is vulnerable in JerryScript 3.0.0, which originates in /base/ecma-helpers.cecmagetlexenvtype An assertion ecmaislexicalenvironment objectp fails at /base/ecma-helpers.c ecmagetlexenvtype. No detailed vulnerability details...
JerryScript security vulnerabilities
JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial of service vulnerability in version 3.0.0, which stems from an assertion failure in /jerry-core/parser/js/js-parser-expr.c. An attacker could use this vulnerability to launch a denial of service...
CVE-2020-23315: Undefined Security Weakness
There is an ASSERTION pFuncBody-GetYieldRegister == oldYieldRegister failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta...
CVE-2021-46339: Reachable Assertion
There is an Assertion 'litisvalidcesu8string stringp, stringsize' failed at /base/ecma-helpers-string.cecmanewecmastringfromutf8 in JerryScript 3.0.0...
PT-2022-8658
Name of the Vulnerable Software and Affected Versions ChakraCore version 1.12.0.0-beta Description The issue is related to an assertion failure in the Js::DebugContext::RundownSourcesAndReparse function, specifically when comparing pFuncBody-GetYieldRegister and oldYieldRegister. Recommendations...
PT-2022-12653
Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the ecma new ecma string from utf8 function at /base/ecma-helpers-string.c in JerryScript. The assertion lit is valid cesu8 string string p, string size fail...
Microsoft ChakraCore security vulnerabilities
Microsoft ChakraCore is the core part of an open source Chakra JavaScript scripting engine used in the Edge browser by Microsoft USA and can also be used as a standalone JavaScript engine. The vulnerability stems from an assertion pFuncBody-GetYieldRegister == oldYieldRegister failure in...
JerryScript security vulnerabilities
JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial-of-service vulnerability in version 3.0.0, which stems from an assertion failure in /jerry-core/lit/lit-strings.c. An attacker could use this vulnerability to launch a denial of service...
CVE-2021-46345: Reachable Assertion
There is an Assertion 'cesu8cursorp == cesu8endp' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0...
CVE-2021-46347: Reachable Assertion
There is an Assertion 'ecmaobjectcheckclassnameisobject objp' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0...
CVE-2021-46349: Reachable Assertion
There is an Assertion 'type == ECMAOBJECTTYPEGENERAL || type == ECMAOBJECTTYPEPROXY' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0...