{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/45156?format=json","vulnerability_id":"VCID-zm48-kdxj-mub9","summary":"Out-of-bounds Write\nJerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jerry-core/parser/js/js-lexer.c.","aliases":[{"alias":"CVE-2023-31906"}],"fixed_packages":[],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/60201?format=json","purl":"pkg:conan/jerryscript@3.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1dmn-erdq-43gv"},{"vulnerability":"VCID-1h9u-ym8m-jbav"},{"vulnerability":"VCID-27cg-rjmx-pqb4"},{"vulnerability":"VCID-2prq-dcy2-8khr"},{"vulnerability":"VCID-2xq3-mq8n-fkfc"},{"vulnerability":"VCID-3y3s-cktx-a7fy"},{"vulnerability":"VCID-55gv-vq2s-33g9"},{"vulnerability":"VCID-6z4b-cv6b-tqgy"},{"vulnerability":"VCID-75m8-ty1f-qbfy"},{"vulnerability":"VCID-96gz-7p7d-kye6"},{"vulnerability":"VCID-9mgp-bp1a-a7d4"},{"vulnerability":"VCID-agbb-mdrb-j3du"},{"vulnerability":"VCID-bhk2-uvwq-qqa5"},{"vulnerability":"VCID-caxw-hx6n-dqed"},{"vulnerability":"VCID-cyff-fter-jyfe"},{"vulnerability":"VCID-e6pp-ehvp-v3fs"},{"vulnerability":"VCID-eeup-qx6t-puh9"},{"vulnerability":"VCID-enra-h154-hyhu"},{"vulnerability":"VCID-h53g-vkxw-5fgy"},{"vulnerability":"VCID-m9wh-1w5u-p7a1"},{"vulnerability":"VCID-mscu-ujzn-cyfv"},{"vulnerability":"VCID-my7c-dmwn-ruck"},{"vulnerability":"VCID-nzxx-wpdu-53dv"},{"vulnerability":"VCID-pk9x-w83a-pbf7"},{"vulnerability":"VCID-pkt4-nu1n-77cg"},{"vulnerability":"VCID-pr6g-yv9y-byhf"},{"vulnerability":"VCID-u4va-nsrk-pkgr"},{"vulnerability":"VCID-ucve-wqaq-5yd1"},{"vulnerability":"VCID-uefz-v5rg-8bgx"},{"vulnerability":"VCID-ueya-bx43-73hf"},{"vulnerability":"VCID-uye6-f6w4-wqb3"},{"vulnerability":"VCID-uzvh-qmgc-juf7"},{"vulnerability":"VCID-wjwq-qn34-1qd2"},{"vulnerability":"VCID-xv39-kbyz-7feu"},{"vulnerability":"VCID-y6qb-5zby-a3cp"},{"vulnerability":"VCID-ycvt-ak76-duge"},{"vulnerability":"VCID-zbqb-uwgx-nffg"},{"vulnerability":"VCID-ze5f-j4ny-8ueh"},{"vulnerability":"VCID-zm48-kdxj-mub9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:conan/jerryscript@3.0.0"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-31906","reference_id":"","reference_type":"","scores":[{"value":"0.00136","scoring_system":"epss","scoring_elements":"0.33303","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-31906"},{"reference_url":"https://github.com/jerryscript-project/jerryscript/issues/5066","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-27T17:15:32Z/"}],"url":"https://github.com/jerryscript-project/jerryscript/issues/5066"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31906","reference_id":"CVE-2023-31906","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31906"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":787,"name":"Out-of-bounds Write","description":"The product writes data past the end, or before the beginning, of the intended buffer."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":"7.8 - 7.8","exploitability":"0.5","weighted_severity":"0.0","risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zm48-kdxj-mub9"}