Jerryscript
by Jerryscript
Source repositories
CVEs (98)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-23311 | Hig | 0.49 | 7.5 | 0.01 | Jun 10, 2021 | There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in JerryScript 2.2.0. | ||
| CVE-2020-23310 | Hig | 0.49 | 7.5 | 0.01 | Jun 10, 2021 | There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statement in JerryScript 2.2.0. | ||
| CVE-2020-23309 | Hig | 0.49 | 7.5 | 0.01 | Jun 10, 2021 | There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript 2.2.0. | ||
| CVE-2020-23308 | Hig | 0.49 | 7.5 | 0.01 | Jun 10, 2021 | There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0. | ||
| CVE-2020-13623 | Hig | 0.49 | 7.5 | 0.01 | May 27, 2020 | JerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy operation. | ||
| CVE-2017-9250 | Hig | 0.49 | 7.5 | 0.03 | May 28, 2017 | The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript… | ||
| CVE-2024-33258 | Hig | 0.46 | 7.1 | 0.00 | Apr 26, 2024 | Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm/vm.c. | ||
| CVE-2020-24344 | Hig | 0.46 | 7.1 | 0.01 | Aug 13, 2020 | JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read. | ||
| CVE-2021-26199 | Med | 0.42 | 6.5 | 0.01 | Jun 10, 2021 | An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c file. | ||
| CVE-2021-26198 | Med | 0.42 | 6.5 | 0.01 | Jun 10, 2021 | An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecma_deref_bigint in ecma-helpers.c file. | ||
| CVE-2021-26197 | Med | 0.42 | 6.5 | 0.01 | Jun 10, 2021 | An issue was discovered in JerryScript 2.4.0. There is a SEGV in main_print_unhandled_exception in main-utils.c file. | ||
| CVE-2021-26194 | Med | 0.42 | 6.5 | 0.01 | Jun 10, 2021 | An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file. | ||
| CVE-2018-1000636 | Med | 0.42 | 6.5 | 0.01 | Aug 20, 2018 | JerryScript version Tested on commit f86d7459d195c8ba58479d1861b0cc726c8b3793. Analysing history it seems that the issue has been present since commit 64a340ffeb8809b2b66bbe32fd443a8b79fdd860 contains a CWE-476: NULL Pointer Dereference vulnerability in Triggering undefined… | ||
| CVE-2024-33255 | Med | 0.40 | 6.2 | 0.00 | Apr 26, 2024 | Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_string_list. | ||
| CVE-2024-33259 | Med | 0.36 | 5.5 | 0.00 | Apr 26, 2024 | Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scanner_seek at jerry-core/parser/js/js-scanner-util.c. | ||
| CVE-2020-24187 | Med | 0.36 | 5.5 | 0.00 | Aug 11, 2023 | An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Pointer Dereference). | ||
| CVE-2023-31921 | Med | 0.36 | 5.5 | 0.00 | May 12, 2023 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-core/ecma/operations/ecma-big-uint.c. | ||
| CVE-2023-31920 | Med | 0.36 | 5.5 | 0.00 | May 12, 2023 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c. | ||
| CVE-2023-31919 | Med | 0.36 | 5.5 | 0.00 | May 12, 2023 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerry-core/jcontext/jcontext.c. | ||
| CVE-2023-31918 | Med | 0.36 | 5.5 | 0.00 | May 12, 2023 | Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser/js/js-parser.c. |
- risk 0.49cvss 7.5epss 0.01
There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in JerryScript 2.2.0.
- risk 0.49cvss 7.5epss 0.01
There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statement in JerryScript 2.2.0.
- risk 0.49cvss 7.5epss 0.01
There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript 2.2.0.
- risk 0.49cvss 7.5epss 0.01
There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0.
- risk 0.49cvss 7.5epss 0.01
JerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy operation.
- risk 0.49cvss 7.5epss 0.03
The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript…
- risk 0.46cvss 7.1epss 0.00
Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm/vm.c.
- risk 0.46cvss 7.1epss 0.01
JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read.
- risk 0.42cvss 6.5epss 0.01
An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c file.
- risk 0.42cvss 6.5epss 0.01
An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecma_deref_bigint in ecma-helpers.c file.
- risk 0.42cvss 6.5epss 0.01
An issue was discovered in JerryScript 2.4.0. There is a SEGV in main_print_unhandled_exception in main-utils.c file.
- risk 0.42cvss 6.5epss 0.01
An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file.
- risk 0.42cvss 6.5epss 0.01
JerryScript version Tested on commit f86d7459d195c8ba58479d1861b0cc726c8b3793. Analysing history it seems that the issue has been present since commit 64a340ffeb8809b2b66bbe32fd443a8b79fdd860 contains a CWE-476: NULL Pointer Dereference vulnerability in Triggering undefined…
- risk 0.40cvss 6.2epss 0.00
Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_string_list.
- risk 0.36cvss 5.5epss 0.00
Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scanner_seek at jerry-core/parser/js/js-scanner-util.c.
- risk 0.36cvss 5.5epss 0.00
An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Pointer Dereference).
- risk 0.36cvss 5.5epss 0.00
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-core/ecma/operations/ecma-big-uint.c.
- risk 0.36cvss 5.5epss 0.00
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c.
- risk 0.36cvss 5.5epss 0.00
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerry-core/jcontext/jcontext.c.
- risk 0.36cvss 5.5epss 0.00
Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser/js/js-parser.c.
Page 3 of 5