EUVD-2026-86471

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

CVE-2026-88388

The Espruino 2v29 firmware (commit bffc6d0) is vulnerable to a stack-based buffer overflow in the JavaScript error stack-trace handling path on 64-bit builds . A remote attacker can provide JavaScript input that triggers an exception, causing the function jslPrintTokenLineMarker() to pass a 4-byt...