Jerryscript vulnerabilities
We track 8 vulnerabilities in Jerryscript products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on September 20, 2023.
Latest Jerryscript vulnerabilities
- 9.8 Critical severity
Jerryscript: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ecma-helpers-string.c.
- 9.8 Critical severity
Jerryscript: Out-of-bounds Write
Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.
- 7.5 High severity
Jerryscript: Reachable Assertion
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start at jerry-core/parser/js/js-parser-statm.c.
- 7.5 High severity
Jerryscript: Reachable Assertion
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at jerry-core/ecma/base/ecma-property-hashmap.c.
- 7.8 High severity
Jerryscript: Out-of-bounds Write
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component parser_parse_function_statement at /jerry-core/parser/js/js-parser-statm.c.
- 7.8 High severity
Jerryscript: Out-of-bounds Write
Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scanner_literal_is_created at /jerry-core/parser/js/js-scanner-util.c.
- 7.8 High severity
Jerryscript: Out-of-bounds Write
Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jerry-core/parser/js/js-lexer.c.
- 7.8 High severity
Jerryscript: Out-of-bounds Write
Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c.