An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file.
References
Link | Resource |
---|---|
https://github.com/jerryscript-project/jerryscript/issues/4917 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
21 Jan 2022, 20:52
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-416 | |
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
CPE | cpe:2.3:a:jerryscript:jerryscript:2.3.0:*:*:*:*:*:*:* | |
References | (MISC) https://github.com/jerryscript-project/jerryscript/issues/4917 - Exploit, Issue Tracking, Third Party Advisory |
14 Jan 2022, 21:37
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-01-14 21:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-46170
Mitre link : CVE-2021-46170
CVE.ORG link : CVE-2021-46170
JSON object : View
Products Affected
jerryscript
- jerryscript
CWE
CWE-416
Use After Free