CVE-2017-9250: NULL Pointer Dereference

The lexerprocesscharliteral function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via malformed JavaScript source code, related to...

PT-2017-18806

Name of the Vulnerable Software and Affected Versions JerryScript version 1.0 Description The issue is related to the lexer process char literal function in JerryScript, which does not handle memory allocation for empty strings correctly. This can be exploited by remote attackers using malformed...