Heap overflow

There is a heap-buffer-overflow at jmem-poolman.c:165 in jmempoolscollectempty in JerryScript 2.2.0...

CVE-2020-23302

There is a heap-use-after-free at ecma-helpers-string.c:772 in ecmarefecmastring in JerryScript 2.2.0...

CVE-2020-23321

There is a heap-buffer-overflow at lit-strings.c:431 in litreadcodeunitfromutf8 in JerryScript 2.2.0...

Authentication flaw

There is an Assertion 'contextp-stackdepth == contextp-contextstackdepth' failed at js-parser-statm.c:2756 in parserparsestatements in JerryScript 2.2.0...

UBUNTU-CVE-2020-23321

There is a heap-buffer-overflow at lit-strings.c:431 in litreadcodeunitfromutf8 in JerryScript 2.2.0...

UBUNTU-CVE-2020-23322

There is an Assertion in 'contextp-token.type == LEXERRIGHTBRACE || contextp-token.type == LEXERASSIGN || contextp-token.type == LEXERCOMMA' in parserparseobjectinitializer in JerryScript 2.2.0...

UBUNTU-CVE-2020-23320

There is an Assertion in 'contextp-nextscannerinfop-type == SCANNERTYPEFUNCTION' in parserparsefunctionarguments in JerryScript 2.2.0...

UBUNTU-CVE-2020-23313

There is an Assertion 'scopestackp contextp-scopestackp' failed at js-scanner-util.c:2510 in scannerliteraliscreated in JerryScript 2.2.0...

UBUNTU-CVE-2020-23309

There is an Assertion 'contextp-stackdepth == contextp-contextstackdepth' failed at js-parser-statm.c:2756 in parserparsestatements in JerryScript 2.2.0...

CVE-2021-26199

An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecmabytecoderef in ecma-helpers.c file...

CVE-2021-26199

Removed by vendor...

CVE-2021-26199

JerryScript 2.4.0 contains a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c, per CVE-2021-26199. The provided connected documents consistently identify this issue without offering concrete remediation details or patch versions. Exploitation status is not documented in the supplied sou...

CVE-2021-26198

JerryScript 2.4.0 contains a SEGV vulnerability in ecma_deref_bigint located in ecma-helpers.c. The public notes describe the issue but do not provide exploitation details, affected versions beyond 2.4.0, or concrete remediation steps in the supplied documents. No patch/version mitigation is spec...

CVE-2021-26198

An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...

CVE-2021-26198

Removed by vendor...

CVE-2021-26197

An issue was discovered in JerryScript 2.4.0. There is a SEGV in mainprintunhandledexception in main-utils.c file...

CVE-2021-26197

CVE-2021-26197 affects JerryScript 2.4.0. Root cause: a SEGV in main_print_unhandled_exception in main-utils.c. Practical impact: potential crash/denial of service due to a segmentation fault. No exploit vectors or patch details are provided in the connected documents. Remediation details (e.g., ...

CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

CVE-2021-26195

JerryScript 2.4.0 is affected by a heap-buffer-overflow in lexer_parse_number (js-lexer.c). Connected documents confirm the root cause and file, but no remediation or patch details are provided in the supplied sources.

CVE-2021-26195

Removed by vendor...