2 matches found
JerryScript Denial of Service Vulnerability
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in the 'lexerprocesscharliteral' function in the jerry-core/parser/js/js-lexer.c file in JerryScript version 1.0, which stems from the failure of a program to properly allocate memory. An attacker can exploit this...
7.5CVSS6.7AI score0.02495EPSS
SaveExploits1References1
PT-2017-18806
Name of the Vulnerable Software and Affected Versions JerryScript version 1.0 Description The issue is related to the lexer process char literal function in JerryScript, which does not handle memory allocation for empty strings correctly. This can be exploited by remote attackers using malformed...
7.5CVSS0.02495EPSS
SaveExploits1References6
20