CVE-2021-46345: Reachable Assertion

There is an Assertion 'cesu8cursorp == cesu8endp' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0...

CVE-2021-46343: Reachable Assertion

There is an Assertion 'contextp-token.type == LEXERLITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

CVE-2022-22893: Out-of-bounds Write

Jerryscript 3.0.0 was discovered to contain a stack overflow via vmloop.ltopriv.304 in /jerry-core/vm/vm.c...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, is vulnerable in JerryScript 3.0.0, which originates in /base/ecma-helpers.cecmagetlexenvtype An assertion ecmaislexicalenvironment objectp fails at /base/ecma-helpers.c ecmagetlexenvtype. No detailed vulnerability details...

JerryScript has unspecified vulnerabilities

JerryScript is a lightweight JavaScript engine from the JerryScript Jerryscript project. a security vulnerability exists in JerryScript, which stems from an issue found in JerryScript commit a6ab5e9. Use-After-Free in the lexercompareidentifiertostring in the js-lexer.c file. No details of the...

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

Design/Logic Flaw

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

UBUNTU-CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

CVE-2021-46170

Removed by vendor...

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

CVE-2021-46170

CVE-2021-46170 describes a Use-After-Free in JerryScript’s lexer_compare_identifier_to_string (js-lexer.c) from commit a6ab5e9. The vulnerability is reported across multiple feeds (NVD, OSV, CNVD, UBuntu OSV, Debian, etc.). Affected component is the JerryScript JavaScript engine; root cause is a ...

CVE-2021-46170: Use After Free

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

JerryScript 资源管理错误漏洞

JerryScript is a lightweight JavaScript engine from the JerryScript Jerryscript project. a security vulnerability exists in JerryScript, which stems from an issue found in JerryScript commit a6ab5e9. Use-After-Free in the lexercompareidentifiertostring in the js-lexer.c file. No details of the...

The vulnerability in the `lexer_parse_number` function of the `js-lexer.c` component of the JavaScript engine for Internet of Things applications, JerryScript, and the IoT.js platform, related to buffer overflows, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the lexerparsenumber function in the js-lexer.c component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform, is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to confidential dat...

The vulnerability of the `jmem_pools_collect_empty` function in the `jmem-poolman.c` component of the JavaScript Internet of Things engine JerryScript and the IoT.js platform, related to out-of-buffer writing, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the jmempoolscollectempty function in the jmem-poolman.c component of the JavaScript Internet of Things engine, JerryScript, and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to sensitive data,...

The vulnerability in the `parser_parse_function_arguments` function of the `js-parser.c` component of the JavaScript Internet of Things engine, JerryScript, and the IoT.js platform, related to the insufficient use of the `assert()` function, allows a malicious actor to cause a service failure.

The vulnerability of the parserparsefunctionarguments function in the js-parser.c component of the JavaScript Internet of Things engine, JerryScript, and the IoT.js platform is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability in the `parser_parse_statements` function of the `js-parser-statm.c` component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform, related to the insufficient use of the `assert()` function, allows a attacker to trigger a service failure.

The vulnerability of the parserparsestatements function in the js-parser-statm.c component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform is related to incorrect comparisons. Exploiting this vulnerability could allow a remote attacker to cause a service...