Jerryscript
by Jerryscript
Source repositories
CVEs (95)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-23312 | 0.00 | — | 0.01 | Jun 10, 2021 | There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_source in JerryScript 2.2.0. | |||
| CVE-2020-23311 | 0.00 | — | 0.01 | Jun 10, 2021 | There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in JerryScript 2.2.0. | |||
| CVE-2020-23310 | 0.00 | — | 0.01 | Jun 10, 2021 | There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statement in JerryScript 2.2.0. | |||
| CVE-2020-23309 | 0.00 | — | 0.01 | Jun 10, 2021 | There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript 2.2.0. | |||
| CVE-2020-23308 | 0.00 | — | 0.01 | Jun 10, 2021 | There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0. | |||
| CVE-2020-23302 | 0.00 | — | 0.01 | Jun 10, 2021 | There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0 | |||
| CVE-2020-29657 | 0.00 | — | 0.01 | Dec 9, 2020 | In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the main-utils.c file. | |||
| CVE-2020-13991 | 0.00 | — | 0.02 | Sep 24, 2020 | vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register. | |||
| CVE-2020-24344 | 0.00 | — | 0.01 | Aug 13, 2020 | JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read. | |||
| CVE-2020-24345 | 0.00 | — | 0.01 | Aug 13, 2020 | JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option | |||
| CVE-2020-14163 | 0.00 | — | 0.01 | Jun 15, 2020 | An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case where garbage collection is triggered after the key operation but before the value operation, as demonstrated by improper read… | |||
| CVE-2020-13649 | 0.00 | — | 0.02 | May 28, 2020 | parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_info_list NULL pointer dereference and a scanner_scan_all assertion failure. | |||
| CVE-2020-13622 | 0.00 | — | 0.01 | May 26, 2020 | JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key query for a Proxy object returns unintended data. | |||
| CVE-2020-13623 | 0.00 | — | 0.01 | May 26, 2020 | JerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy operation. | |||
| CVE-2019-1010176 | 0.00 | — | 0.03 | Jul 25, 2019 | JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function lit_char_to_utf8_bytes (jerry-core/lit/lit-char-helpers.c:377). The attack vector is:… |
- CVE-2020-23312Jun 10, 2021risk 0.00cvss —epss 0.01
There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_source in JerryScript 2.2.0.
- CVE-2020-23311Jun 10, 2021risk 0.00cvss —epss 0.01
There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in JerryScript 2.2.0.
- CVE-2020-23310Jun 10, 2021risk 0.00cvss —epss 0.01
There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statement in JerryScript 2.2.0.
- CVE-2020-23309Jun 10, 2021risk 0.00cvss —epss 0.01
There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript 2.2.0.
- CVE-2020-23308Jun 10, 2021risk 0.00cvss —epss 0.01
There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0.
- CVE-2020-23302Jun 10, 2021risk 0.00cvss —epss 0.01
There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0
- CVE-2020-29657Dec 9, 2020risk 0.00cvss —epss 0.01
In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the main-utils.c file.
- CVE-2020-13991Sep 24, 2020risk 0.00cvss —epss 0.02
vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register.
- CVE-2020-24344Aug 13, 2020risk 0.00cvss —epss 0.01
JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read.
- CVE-2020-24345Aug 13, 2020risk 0.00cvss —epss 0.01
JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option
- CVE-2020-14163Jun 15, 2020risk 0.00cvss —epss 0.01
An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case where garbage collection is triggered after the key operation but before the value operation, as demonstrated by improper read…
- CVE-2020-13649May 28, 2020risk 0.00cvss —epss 0.02
parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_info_list NULL pointer dereference and a scanner_scan_all assertion failure.
- CVE-2020-13622May 26, 2020risk 0.00cvss —epss 0.01
JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key query for a Proxy object returns unintended data.
- CVE-2020-13623May 26, 2020risk 0.00cvss —epss 0.01
JerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy operation.
- CVE-2019-1010176Jul 25, 2019risk 0.00cvss —epss 0.03
JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function lit_char_to_utf8_bytes (jerry-core/lit/lit-char-helpers.c:377). The attack vector is:…
Page 5 of 5