Lucene search
+L

283 matches found

CNVD
CNVD
added 2022/06/22 12:0 a.m.20 views

JerryScript memory mis-reference vulnerability

JerryScript is a lightweight JavaScript engine from the Jerryscript project. version 2.4.0 of JerryScript is vulnerable to a memory misquoting vulnerability that originates in ecma-helpers- in ecmacompareecmanondirectstrings. string.c:1940, which is responsible for freeing memory, is garbled. An...

6.8CVSS4.6AI score0.00727EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2022/06/22 12:0 a.m.77 views

JerryScript buffer overflow vulnerability

JerryScript, a lightweight JavaScript engine from the Jerryscript project, is vulnerable to a buffer overflow vulnerability in JerryScript version 2.4.0, which stems from ecma-helpers.c:326 in ecmagetlexenvtype when handling untrusted input a boundary error occurs. A remote attacker could exploit...

6.8CVSS3.6AI score0.00683EPSS
Exploits1Affected Software1
NVD
NVD
added 2022/06/20 2:15 p.m.33 views

CVE-2021-41683

There is a stack-overflow at ecma-helpers.c:326 in ecmagetlexenvtype in JerryScript 2.4.0...

7.8CVSS0.00683EPSS
Exploits1References1
NVD
NVD
added 2022/06/20 2:15 p.m.34 views

CVE-2021-41682

There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecmacompareecmanondirectstrings in JerryScript 2.4.0...

7.8CVSS0.00727EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/20 2:15 p.m.4 views

CVE-2021-41682

There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecmacompareecmanondirectstrings in JerryScript 2.4.0...

7.8CVSS7.1AI score0.00727EPSS
Exploits1References2
OSV
OSV
added 2022/06/20 2:15 p.m.24 views

CVE-2021-41682

There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecmacompareecmanondirectstrings in JerryScript 2.4.0...

7.8CVSS6.8AI score
Exploits0References1
Prion
Prion
added 2022/06/20 2:15 p.m.20 views

Stack overflow

There is a stack-overflow at ecma-helpers.c:326 in ecmagetlexenvtype in JerryScript 2.4.0...

6.8CVSS7.6AI score0.00683EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2022/06/20 2:15 p.m.6 views

UBUNTU-CVE-2021-41682

There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecmacompareecmanondirectstrings in JerryScript 2.4.0...

7.8CVSS7.1AI score0.00727EPSS
Exploits1References3
Prion
Prion
added 2022/06/20 2:15 p.m.25 views

Heap overflow

There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecmacompareecmanondirectstrings in JerryScript 2.4.0...

6.8CVSS7.6AI score0.00727EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2022/06/20 2:15 p.m.3 views

UBUNTU-CVE-2021-41683

There is a stack-overflow at ecma-helpers.c:326 in ecmagetlexenvtype in JerryScript 2.4.0...

7.8CVSS5.8AI score0.00683EPSS
Exploits1References3
CVE
CVE
added 2022/06/20 1:33 p.m.68 views

CVE-2021-41683

CVE-2021-41683 stems from a stack overflow in JerryScript 2.4.0, triggered at ecma-helpers.c:326 in ecma_get_lex_env_type when processing input. The available documents identify the affected component as JerryScript 2.4.0 and specify the vulnerability location, but do not provide concrete exploit...

7.8CVSS7.5AI score0.00683EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/20 1:33 p.m.40 views

CVE-2021-41683

There is a stack-overflow at ecma-helpers.c:326 in ecmagetlexenvtype in JerryScript 2.4.0...

7.8AI score0.00683EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2022/06/20 1:33 p.m.64 views

CVE-2021-41683

Removed by vendor...

7.8CVSS7.7AI score0.00683EPSS
Exploits1
CVE
CVE
added 2022/06/20 1:14 p.m.71 views

CVE-2021-41682

CVE-2021-41682 reports a heap-use-after-free in JerryScript 2.4.0, caused by a flaw in ecma_compare_ecma_non_direct_strings at ecma-helpers-string.c:1940. The vulnerability affects the string handling path and has been described across multiple sources as potentially enabling crashes and, in some...

7.8CVSS7.5AI score0.00727EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2022/06/20 1:14 p.m.42 views

CVE-2021-41682

Removed by vendor...

7.8CVSS7.7AI score0.00727EPSS
Exploits1
CNNVD
CNNVD
added 2022/06/20 12:0 a.m.7 views

JerryScript 资源管理错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. version 2.4.0 of JerryScript is vulnerable to a memory misquoting vulnerability that originates in ecma-helpers- in ecmacompareecmanondirectstrings. string.c:1940, which is responsible for freeing memory, is garbled. An...

7.8CVSS6AI score0.00727EPSS
Exploits1References2
OSV
OSV
added 2022/05/03 11:15 a.m.4 views

CVE-2021-41959

JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, which causes a memory leak...

7.5CVSS5.8AI score0.01141EPSS
Exploits1References2
GithubExploit
GithubExploit
added 2022/04/29 7:9 a.m.263 views

Exploit for Integer Overflow or Wraparound in Google Android

V8 JavaScript Engine ============= V8 is Google's open source J...

7.8CVSS7.5AI score0.00961EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2022/04/05 4:15 p.m.6 views

CVE-2021-41751

Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecmabuiltinarrayprototypeobjectslice in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021...

9.8CVSS7.4AI score0.01168EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2022/04/05 3:37 p.m.36 views

CVE-2021-41751

Removed by vendor...

9.8CVSS9.4AI score0.01168EPSS
Exploits0
Rows per page
Query Builder