Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jerry-core/parser/js/js-lexer.c.
References
| Link | Resource |
|---|---|
| https://github.com/jerryscript-project/jerryscript/issues/5066 | Exploit Issue Tracking Patch |
| https://github.com/jerryscript-project/jerryscript/issues/5066 | Exploit Issue Tracking Patch |
Configurations
History
21 Nov 2024, 08:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/jerryscript-project/jerryscript/issues/5066 - Exploit, Issue Tracking, Patch |
16 May 2023, 23:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/jerryscript-project/jerryscript/issues/5066 - Exploit, Issue Tracking, Patch | |
| CWE | CWE-787 | |
| CPE | cpe:2.3:a:jerryscript:jerryscript:3.0.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
10 May 2023, 15:26
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-10 15:15
Updated : 2025-01-27 18:15
NVD link : CVE-2023-31906
Mitre link : CVE-2023-31906
CVE.ORG link : CVE-2023-31906
JSON object : View
Products Affected
jerryscript
- jerryscript
CWE
CWE-787
Out-of-bounds Write