High severity7.5NVD Advisory· Published May 28, 2020· Updated Jun 17, 2026
CVE-2020-13649
CVE-2020-13649
Description
parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_info_list NULL pointer dereference and a scanner_scan_all assertion failure.
Affected products
3cpe:2.3:a:jerryscript:jerryscript:2.2.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jerryscript:jerryscript:2.2.0:*:*:*:*:*:*:*
- (no CPE)range: <=2.2.0
- JerryScript/JerryScriptdescription
Patches
Vulnerability mechanics
References
3- github.com/jerryscript-project/jerryscript/commit/69f8e78c2f8d562bd6d8002b5488f1662ac30d24nvdPatchThird Party Advisory
- github.com/jerryscript-project/jerryscript/issues/3786nvdThird Party Advisory
- github.com/jerryscript-project/jerryscript/issues/3788nvdThird Party Advisory
News mentions
0No linked articles in our index yet.