PT-2023-25802 · Microsoft · Chakracore

Name of the Vulnerable Software and Affected Versions: ChakraCore version cbb9b Description: A segmentation violation was discovered in ChakraCore via the function Js::ProfilingHelpers::ProfiledNewScArray. Recommendations: For ChakraCore version cbb9b, consider disabling the...

CVE-2023-37143

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp...

CVE-2023-37143

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp...

CVE-2023-37140

ChakraCore (branch master) contains a segmentation fault in Js::DiagScopeVariablesWalker::GetChildrenCount(), per CVE-2023-37140. Affected component: ChakraCore JavaScript engine; root cause: segmentation violation in the mentioned function. Documented impact indicates local attack vector with av...

ChakraCore 资源管理错误漏洞

ChakraCore is a chakra-core open source JavaScript engine with C API. ChakraCore has a security vulnerability that stems from the inclusion of a segmentation violation in the function Js::ProfilingHelpers::ProfiledNewScArray...

ChakraCore 资源管理错误漏洞

ChakraCore is a chakra-core open source JavaScript engine with C API. A security vulnerability exists in ChakraCore that stems from a segmentation violation contained in the function BackwardPass::IsEmptyLoopAfterMemOp...

CVE-2023-37140

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount...

CVE-2023-37141

ChakraCore (branch master cbb9b) is affected by a segmentation violation in the function Js::ProfilingHelpers::ProfiledNewScArray(). The vulnerability causes a crash (local impact) and is tied to the ChakraCore engine’s profiling array creation. Affected version is stated as cbb9b; no explicit ex...

CVE-2023-37142

CVE-2023-37142 is a ChakraCore vulnerability where a segmentation violation occurs in Js::EntryPointInfo::HasInlinees() on the master branch (cbb9b). The incident is documented with a CVSSv3.1 base score of 5.5 (MEDIUM) with LOCAL attack vector, LOW attack complexity, no privileges required, user...

CVE-2023-37141

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray...

ChakraCore 资源管理错误漏洞

ChakraCore is a chakra-core open source JavaScript engine with C API. ChakraCore has a security vulnerability that stems from the inclusion of a segmentation violation in the function Js::EntryPointInfo::HasInlinees...

CVE-2023-37140

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount...

CVE-2023-37141

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray...

CVE-2023-37142

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees...

CVE-2023-37143

CVE-2023-37143 affects ChakraCore (branch master cbb9b); a segmentation violation was reported in BackwardPass::IsEmptyLoopAfterMemOp(). CVSSv3.1 indicates local exploitation, low attack complexity, no privileges required, user interaction required, with availability impact High. Exploitation sta...

ChakraCore 资源管理错误漏洞

ChakraCore is a chakra-core open source JavaScript engine with C API. A security vulnerability exists in ChakraCore that stems from a segmentation violation contained in the function Js::DiagScopeVariablesWalker::GetChildrenCount...

CVE-2022-30858

An issue was discovered in ngiflib 0.4. There is SEGV in SDLLoadAnimatedGif when use SDLaffgif. poc : ./SDLaffgif CAfile20...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the segmentation fault in the isomread.c and isomwrite.c files, which allows an attacker to cause an application crash by providing a malicious input...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a segmentation fault in the gfsgvrmlissffield function of vrmltools.c, which allows an attacker to cause an application crash by providing a malicious input...

SUSE: Security Advisory (SUSE-SU-2023:2835-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...