Espruino Out-of-Bounds Read Vulnerability

Espruino is a JavaScript interpreter for use in microcontrollers. A security vulnerability exists in Espruino versions prior to 1.98 that stems from a failure to validate the height of the libs/graphics/jswrapgraphics.c file when analyzing the syntax. An attacker can exploit this vulnerability to...