CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file.
References
Link Resource
https://github.com/jerryscript-project/jerryscript/issues/4917 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:jerryscript:jerryscript:2.3.0:*:*:*:*:*:*:*

History

21 Jan 2022, 20:52

Type Values Removed Values Added
CWE CWE-416
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
CPE cpe:2.3:a:jerryscript:jerryscript:2.3.0:*:*:*:*:*:*:*
References (MISC) https://github.com/jerryscript-project/jerryscript/issues/4917 - (MISC) https://github.com/jerryscript-project/jerryscript/issues/4917 - Exploit, Issue Tracking, Third Party Advisory

14 Jan 2022, 21:37

Type Values Removed Values Added
New CVE

Information

Published : 2022-01-14 21:15

Updated : 2024-02-04 22:08


NVD link : CVE-2021-46170

Mitre link : CVE-2021-46170

CVE.ORG link : CVE-2021-46170


JSON object : View

Products Affected

jerryscript

  • jerryscript
CWE
CWE-416

Use After Free