2 matches found
CVE-2018-11591
Espruino before 1.98 allows attackers to cause a denial of service application crash with a user crafted input file via a NULL pointer dereference during syntax parsing. This was addressed by adding validation for a debug trace print statement in jsvar.c...
5.5CVSS6.7AI score0.01013EPSS
SaveExploits1References1
CVE-2018-11591
Espruino before version 1.98 is affected by a denial-of-service vulnerability caused by a NULL pointer dereference during syntax parsing when processing a crafted input file. Multiple connected sources confirm that the issue exists in Espruino 1.97 and earlier, and it was mitigated by adding vali...
5.5CVSS5.3AI score0.01013EPSS
SaveExploits1References3Affected Software1
20