CVE-2020-14163

Removed by vendor...

CVE-2020-14163

CVE-2020-14163 affects JerryScript 2.2.0. The vulnerability is a race that can cause memory corruption when handling key/value pairs: if garbage collection is triggered after the key operation but before the value operation, improper read access can occur in ecma_gc_set_object_visited (ecma/base/...

PT-2020-13902

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description An issue was discovered in ecma/operations/ecma-container-object.c where operations with key/value pairs did not consider the case where garbage collection is triggered after the key operation but before t...

CVE-2020-14163: Out-of-bounds Read

An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case where garbage collection is triggered after the key operation but before the value operation, as demonstrated by improper read access to memory in...

PT-2020-6420

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to a heap-buffer-overflow in the re parse char escape function of the re-parser.c component in JerryScript. This could allow a remote attacker to access confidential data, compromise i...

PT-2020-6419

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to an assertion in the parser parse object initializer function in the js-parser-expr.c component of the JerryScript JavaScript engine for the Internet of Things. This assertion is...

PT-2020-6418

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to a heap-buffer-overflow in the lit read code unit from utf8 function of the lit-strings.c component in JerryScript. This can allow a remote attacker to access confidential data,...

PT-2020-6416

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to an assertion in the parser emit cbc backward branch function in the js-parser-util.c component of the JerryScript engine for the Internet of Things. This assertion is 'flags CBC STA...

PT-2020-6417

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to an assertion in the parser parse function arguments function in JerryScript, specifically in the js-parser.c component. This assertion is context p-next scanner info p-type == SCANN...

PT-2020-6414

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to the scanner literal is created function in the js-scanner-util.c component of the JerryScript JavaScript engine for Internet of Things IoT. It is caused by insufficient use of the...

PT-2020-6411

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to an incorrect comparison in the parser parse function statement function of the js-parser-statm.c component in the JerryScript JavaScript engine for the Internet of Things. This can...

PT-2020-6412

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to an incorrect comparison in the parser parse object initializer function of the js-parser-expr.c component in JerryScript. This could potentially allow a remote attacker to cause a...

PT-2020-6415

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to the parser parse try statement end function in the js-parser-statm.c component of the JerryScript JavaScript engine for the Internet of Things. It involves an insufficient use of th...

PT-2020-6413

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to the parser parse source function in the js-parser.c component of the JerryScript JavaScript engine for Internet of Things IoT devices. It involves an assertion failure, specifically...

PT-2020-6409

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to the parser parse expression function in the js-parser-expr.c component of the JerryScript JavaScript engine for Internet of Things IoT devices. It is caused by insufficient use of t...

PT-2020-6410

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to an incorrect comparison in the parser parse statements function of the js-parser-statm.c component in the JerryScript JavaScript engine for the Internet of Things. This could...

JerryScript Code Problem Vulnerability

JerryScript is a lightweight JavaScript engine . A code issue vulnerability exists in the parser/js/js-scanner.c file in JerryScript version 2.2.0. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. No detailed...

CVE-2020-13649

parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer dereference and a scannerscanall assertion failure...

CVE-2020-13649

parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer dereference and a scannerscanall assertion failure...

CVE-2020-13649

parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer dereference and a scannerscanall assertion failure...