CVE-2022-22888: Out-of-bounds Write

Jerryscript 3.0.0 was discovered to contain a stack overflow via ecmaopobjectfindown in /ecma/operations/ecma-objects.c...

CVE-2022-22891: Undefined Security Weakness

Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecmarefobjectinline in /jerry-core/ecma/base/ecma-gc.c...

CVE-2021-46336: Reachable Assertion

There is an Assertion 'opts & PARSERCLASSLITERALCTORPRESENT' failed at /parser/js/js-parser-expr.cparserparseclassbody in JerryScript 3.0.0...

PT-2022-15721

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description A stack overflow issue was discovered in Jerryscript via vm loop.lto priv.304 in /jerry-core/vm/vm.c. Recommendations For Jerryscript version 3.0.0, consider restricting access to the vm loop function as a...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial-of-service vulnerability in version 3.0.0, which stems from an assertion failure in /parser/js/js-parser-mem.c. An attacker could use this vulnerability to launch a denial of service...

CVE-2022-22893: Out-of-bounds Write

Jerryscript 3.0.0 was discovered to contain a stack overflow via vmloop.ltopriv.304 in /jerry-core/vm/vm.c...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in JerryScript 3.0.0, which stems from an assertion in /jerry-core/parser/js/js-parser-expr.c flags & PARSERPATTERNHASRESTELEMENT fails. No details of the vulnerability are currently provided...

PT-2022-15717

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description A stack overflow issue was discovered in Jerryscript via the ecma op object find own function in /ecma/operations/ecma-objects.c. Recommendations For Jerryscript version 3.0.0, consider disabling the ecma ...

PT-2022-12655

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the JerryScript code. Specifically, the assertion 'ecma is lexical environment obj p || !ecma op object is fast array obj p' failed at the location...

PT-2022-15723

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description A heap-buffer-overflow issue was discovered in Jerryscript via the ecma utf8 string to number by radix function in /jerry-core/ecma/base/ecma-helpers-conversion.c. Recommendations For Jerryscript version...

PT-2022-12653

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the ecma new ecma string from utf8 function at /base/ecma-helpers-string.c in JerryScript. The assertion lit is valid cesu8 string string p, string size fail...

CVE-2021-46339: Reachable Assertion

There is an Assertion 'litisvalidcesu8string stringp, stringsize' failed at /base/ecma-helpers-string.cecmanewecmastringfromutf8 in JerryScript 3.0.0...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial of service vulnerability in version 3.0.0, which stems from an assertion failure in /jerry-core/parser/js/js-parser-expr.c. An attacker could use this vulnerability to launch a denial of service...

CVE-2021-46343: Reachable Assertion

There is an Assertion 'contextp-token.type == LEXERLITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

PT-2022-12656

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in JerryScript due to the condition 'context p-token.type == LEXER LITERAL' not being met. This issue is located in the file /jerry-core/parser/js/js-parser-expr.c...

CVE-2022-22895: Out-of-bounds Write

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecmautf8stringtonumberbyradix in /jerry-core/ecma/base/ecma-helpers-conversion.c...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, is vulnerable in JerryScript 3.0.0, which originates in /base/ecma-helpers.cecmagetlexenvtype An assertion ecmaislexicalenvironment objectp fails at /base/ecma-helpers.c ecmagetlexenvtype. No detailed vulnerability details...

CVE-2022-22894: Out-of-bounds Write

Jerryscript 3.0.0 was discovered to contain a stack overflow via ecmalcachelookup in /jerry-core/ecma/base/ecma-lcache.c...

PT-2022-15722

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description A stack overflow issue was discovered in Jerryscript via the ecma lcache lookup function in the /jerry-core/ecma/base/ecma-lcache.c file. Recommendations For Jerryscript version 3.0.0, consider disabling t...

JerryScript has unspecified vulnerabilities

JerryScript is a lightweight JavaScript engine from the JerryScript Jerryscript project. a security vulnerability exists in JerryScript, which stems from an issue found in JerryScript commit a6ab5e9. Use-After-Free in the lexercompareidentifiertostring in the js-lexer.c file. No details of the...