9.8
CVSSv3

CVE-2023-36109

Published: 20/09/2023 Updated: 22/09/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

Buffer Overflow vulnerability in JerryScript version 3.0, allows remote malicious users to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ecma-helpers-string.c.

Vulnerable Product Search on Vulmon Subscribe to Product

jerryscript jerryscript 3.0

Github Repositories

a poc for cve-2023-36109

CVE-2023-36109 a poc for cve-2023-36109 request repo git clone githubcom/jerryscript-project/jerryscriptgit cd jerryscript build python /tools/buildpy --clean --debug --compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer --compile-flag=-fno-common --compile-flag=-fsanitize=address --compile-flag=-g --strip=off --lto=off -