EUVD-2021-30386

Malicious code in bioql PyPI...

Heap overflow

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parserparseforstatementstart in the js-parser-statm.c file. This issue is similar to CVE-2020-29657...

CVE-2020-29657

In JerryScript 2.3.0, there is an out-of-bounds read in mainprintunhandledexception in the main-utils.c file...

CVE-2020-29657

CVE-2020-29657 affects JerryScript 2.3.0, with an out-of-bounds read in main_print_unhandled_exception in main-utils.c. NVD CVSSv2: 6.4 (MEDIUM) and CVSSv3.1: 9.1 (CRITICAL) indicate network access, low attack complexity, no authentication, and high impact to confidentiality and availability. Con...

CVE-2020-29657

Removed by vendor...