PT-2023-25804 · Microsoft · Chakracore

Name of the Vulnerable Software and Affected Versions: ChakraCore branch master cbb9b Description: A segmentation violation was discovered in ChakraCore via the function BackwardPass::IsEmptyLoopAfterMemOp. Recommendations: For ChakraCore branch master cbb9b, at the moment, there is no informatio...

CVE-2023-37140

ChakraCore (branch master) contains a segmentation fault in Js::DiagScopeVariablesWalker::GetChildrenCount(), per CVE-2023-37140. Affected component: ChakraCore JavaScript engine; root cause: segmentation violation in the mentioned function. Documented impact indicates local attack vector with av...

CVE-2023-37143

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp...

CVE-2023-37143

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp...

CVE-2023-37142

CVE-2023-37142 is a ChakraCore vulnerability where a segmentation violation occurs in Js::EntryPointInfo::HasInlinees() on the master branch (cbb9b). The incident is documented with a CVSSv3.1 base score of 5.5 (MEDIUM) with LOCAL attack vector, LOW attack complexity, no privileges required, user...

CVE-2023-37140

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount...

CVE-2023-37141

ChakraCore (branch master cbb9b) is affected by a segmentation violation in the function Js::ProfilingHelpers::ProfiledNewScArray(). The vulnerability causes a crash (local impact) and is tied to the ChakraCore engine’s profiling array creation. Affected version is stated as cbb9b; no explicit ex...

CVE-2023-37141

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray...

CVE-2023-37140

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount...

CVE-2023-37143

CVE-2023-37143 affects ChakraCore (branch master cbb9b); a segmentation violation was reported in BackwardPass::IsEmptyLoopAfterMemOp(). CVSSv3.1 indicates local exploitation, low attack complexity, no privileges required, user interaction required, with availability impact High. Exploitation sta...

CVE-2023-37142

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees...

CVE-2023-37767

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BMParseIndexValueReplace function at /lib/libgpac.so...

CVE-2023-37766

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so...

CVE-2023-37174

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...

CVE-2023-37765

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfdumpvrmlsffield function at /lib/libgpac.so...

CVE-2023-37767

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BMParseIndexValueReplace function at /lib/libgpac.so...

CVE-2023-37766

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so...

CVE-2023-37765

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfdumpvrmlsffield function at /lib/libgpac.so...

CVE-2023-37174

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...

CVE-2023-37765

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfdumpvrmlsffield function at /lib/libgpac.so...