CVE-2023-31906

Jerryscript 3.0.0commit 1a2c047 was discovered to contain a heap-buffer-overflow via the component lexercompareidentifiertochars at /jerry-core/parser/js/js-lexer.c...

Heap overflow

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scannerliteraliscreated at /jerry-core/parser/js/js-scanner-util.c...

Heap overflow

Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component ecmabuiltintypedarrayprototypesort...

CVE-2023-31910

Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component parserparsefunctionstatement at /jerry-core/parser/js/js-parser-statm.c...

CVE-2023-31907

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scannerliteraliscreated at /jerry-core/parser/js/js-scanner-util.c...

CVE-2023-31908

Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component ecmabuiltintypedarrayprototypesort...

UBUNTU-CVE-2023-31908

Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component ecmabuiltintypedarrayprototypesort...

UBUNTU-CVE-2023-31910

Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component parserparsefunctionstatement at /jerry-core/parser/js/js-parser-statm.c...

CVE-2023-31910

Removed by vendor...

CVE-2023-31908

Removed by vendor...

CVE-2023-31568

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4...

CVE-2023-31568

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 3.0.0, which stems from the component lexercompareidentifiertochars in /jerry-core/parser/js/js-lexer.c contains a heap buffer overflow...

CVE-2023-31908

Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component ecmabuiltintypedarrayprototypesort...

CVE-2023-31568

The CVE-2023-31568 entry concerns PoDoFo v0.10.0, where a heap-based buffer overflow occurs in PoDoFo::PdfEncryptRC4::PdfEncryptRC4. This affects the PoDoFo library (C++) and can allow an attacker to run arbitrary code in the context of an affected application, as indicated by multiple sources (e...

CVE-2023-31567

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3...

CVE-2023-31567

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3...

CVE-2023-31907

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scannerliteraliscreated at /jerry-core/parser/js/js-scanner-util.c...

CVE-2023-31567

CVE-2023-31567 affects PoDoFo v0.10.0. The vulnerability is a heap buffer overflow in PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3, with potential arbitrary code execution per CNVD-2023-39431. Multiple advisories reference this CVE; Gentoo GLSA 202405-33 recommends upgrading to >= 0.10.1. Nessus e...

CVE-2023-31906

CVE-2023-31906 affects JerryScript 3.0.0 (commit 1a2c047). The vulnerability is a heap-buffer-overflow in the JS lexer component, specifically in lexer_compare_identifier_to_chars within /jerry-core/parser/js/js-lexer.c. According to the available documents, this yields a high-severity issue with...