CVE-2020-14163

An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case where garbage collection is triggered after the key operation but before the value operation, as demonstrated by improper read access to memory in...

CVE-2020-14163

CVE-2020-14163 affects JerryScript 2.2.0. The vulnerability is a race that can cause memory corruption when handling key/value pairs: if garbage collection is triggered after the key operation but before the value operation, improper read access can occur in ecma_gc_set_object_visited (ecma/base/...