Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
jerryscript vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2021-43453
A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start in the js-parser-statm.c file. This issue is similar to CVE-2020-29657.
Jerryscript Jerryscript
7.8
CVSSv3
CVE-2020-24345
JerryScript up to and including 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option
Jerryscript Jerryscript
5.5
CVSSv3
CVE-2022-22901
There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at parser_parse_function_arguments in /js/js-parser.c of JerryScript commit a6ab5e9.
Jerryscript Jerryscript -
5.5
CVSSv3
CVE-2023-30406
Jerryscript commit 1a2c047 exists to contain a segmentation violation via the component ecma_find_named_property at /base/ecma-helpers.c.
Jerryscript Jerryscript -
5.5
CVSSv3
CVE-2023-30408
Jerryscript commit 1a2c047 exists to contain a segmentation violation via the component build/bin/jerry.
Jerryscript Jerryscript -
5.5
CVSSv3
CVE-2023-30410
Jerryscript commit 1a2c047 exists to contain a stack overflow via the component ecma_op_function_construct at /operations/ecma-function-object.c.
Jerryscript Jerryscript -
5.5
CVSSv3
CVE-2023-30414
Jerryscript commit 1a2c047 exists to contain a stack overflow via the component vm_loop at /jerry-core/vm/vm.c.
Jerryscript Jerryscript -
7.1
CVSSv3
CVE-2020-24344
JerryScript up to and including 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read.
Jerryscript Jerryscript
9.8
CVSSv3
CVE-2019-1010176
JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function lit_char_to_utf8_bytes (jerry-core/lit/lit-char-helpers.c:377). The attack vector is: ex...
Jerryscript Jerryscript
9.8
CVSSv3
CVE-2021-42863
A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an malicious user to construct a fake object or a fake arraybuffer with unlimited size.
Jerryscript Jerryscript
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcoded
arbitrary code
CVE-2024-2404
CVE-2024-21111
CVE-2024-28627
CVE-2024-4073
information disclosure
CVE-2024-32780
CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »