UBUNTU-CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

Authentication flaw

There is an Assertion 'contextp-stackdepth == contextp-contextstackdepth' failed at js-parser-statm.c:2756 in parserparsestatements in JerryScript 2.2.0...

CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

CVE-2021-26195

Removed by vendor...

CVE-2021-26195

JerryScript 2.4.0 is affected by a heap-buffer-overflow in lexer_parse_number (js-lexer.c). Connected documents confirm the root cause and file, but no remediation or patch details are provided in the supplied sources.

CVE-2020-23314

Technical details about CVE-2020-23314 are not publicly available in the provided documents. Monitor for updates for any affected products, versions, or remediation information.

CVE-2020-23313

Removed by vendor...

CVE-2020-23312

JerryScript 2.2.0 contains an assertion failure in js-parser.c:2185 (parser_parse_source) when evaluating context.status_flags & PARSER_SCANNING_SUCCESSFUL. The connected documents confirm the affected component and the exact source location but do not provide exploit details, impact beyond the a...

CVE-2020-23311

CVE-2020-23311 affects JerryScript 2.2.0. The vulnerability arises from an assertion failure in the parser_parse_object_initializer (js-parser-expr.c:3230) when processing object initializers. Public documents provide the exact assertion and file/line but do not specify an exploit, affected produ...

CVE-2020-23310

JerryScript 2.2.0 is affected by CVE-2020-23310, due to an assertion failure in parser_parse_function_statement (js-parser-statm.c:733) involving context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION. The connected sources consistently cite this CVE and specify JerryScript 2.2.0 as ...

CVE-2020-23309

There is an Assertion 'contextp-stackdepth == contextp-contextstackdepth' failed at js-parser-statm.c:2756 in parserparsestatements in JerryScript 2.2.0...

CVE-2020-23309

CVE-2020-23309 concerns JerryScript 2.2.0, where an assertion failure occurs in parser_parse_statements (js-parser-statm.c:2756) during parsing. The connected documents provide no public details on exploit vectors, impact scope, or remediation patches. Consequently, the exact vulnerability class,...

CVE-2020-23308

Removed by vendor...

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in scannerliteraliscreated in js-scanner-util.c:2510 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript 2.4.0, which stems from a heap buffer overflow in lexerparsenumber in the js-lexer.c file. No details of the vulnerability are provided at this time...

JerryScript 代码问题漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsefunctionstatement in js-parser-statm.c:733 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

JerryScript 代码问题漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsestatements in js-parser-statm.c:2756 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

OSV-2021-843 Use-after-poison in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35038 Crash type: Use-after-poison READ 8 Crash state: AK::NonnullOwnPtr::operator- JS::IndexedProperties::arraylikesize JS::IndexedProperties::append...

Prototype Pollution

Overview Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution. Recommendation Avoid using js-extend as there is no current safe version of this module References - CVE - GitHub Advisory...