CVE-2023-30406

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

CVE-2023-30408

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

CVE-2023-30408

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

Code injection

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

Design/Logic Flaw

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

CVE-2023-30406

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

CVE-2023-30408

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

CVE-2023-30408

CVE-2023-30408 : Concrete details across connected data show a segmentation fault in JerryScript due to commit 1a2c047, via the component build/bin/jerry. The vulnerability is associated with a local, low-complexity issue in a widely used JS engine, with the impact described as a segmentation vio...

JerryScript 资源管理错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 1a2c047, which stems from a build/bin/jerry group contains segmentation violation...

CVE-2023-30406

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

CVE-2023-30408

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry...

PT-2023-22678 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 1a2c047 Description: A segmentation violation was discovered in Jerryscript via the component build/bin/jerry. Recommendations: For Jerryscript version 1a2c047, at the moment, there is no information about a newer version...

CVE-2023-30408

Removed by vendor...

CVE-2023-30406

CVE-2023-30406 affects JerryScript, specifically the commit 1a2c047, where a segmentation fault occurs in ecma_find_named_property at /base/ecma-helpers.c. Documented impact: availability impact HIGH; CVSS base score 5.5 (MEDIUM) with LOCAL/LOW/NO-USER interaction details. Exploitation status and...

CVE-2023-30406

Removed by vendor...

CVE-2023-25506

NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. The scope of t...

Vulnerability of the `quote_for_pmake()` function in the Netwide Assembler (NASM) assembler; this allows a hacker to execute arbitrary code.

The vulnerability of the quoteforpmake function asm/nasm.c in the Netwide Assembler NASM compiler is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Improper header validation

Impact Improper header parsing. An attacker could sneak in a newline \n into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. Patches The issue is patched in 1.9.1 and 2.4.5...

CVE-2023-27915

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2023-29067

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...