chakra: Crash in Js::JavascriptOperators::GetPropertyNoCache

Detailed report: https://oss-fuzz.com/testcase?key=5679056967696384 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00107fff8012 Crash State: Js::JavascriptOperators::GetPropertyNoCache Js::JavascriptPromise::ResolveHelper...

Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due to a lack of checks before invocation of JavascriptPromise::AsyncSpawnStep which could allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0224,...

chakra: Crash in Js::JavascriptPromise::ResolveHelper

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=4883765965881344 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f2d885c84d8 Crash State: Js::JavascriptPromise::ResolveHelpe...

chakra: Crash in Js::JavascriptPromise::ResolveHelper

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5295096997085184 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f1789a671a0 Crash State: Js::JavascriptPromise::ResolveHelpe...