Search for packages
| purl | pkg:conan/jerryscript@2.3.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-24345
|
Out-of-bounds Write JerryScript allows stack consumption via `function a(){new new Proxy(a,{})}JSON.parse("[]",a).` | There are no reported fixed by versions. |
|
CVE-2021-46170
|
Use After Free An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file. |
Vulnerable |
|
CVE-2022-22901
|
Reachable Assertion There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at parser_parse_function_arguments in /js/js-parser.c of JerryScript commit a6ab5e9. | There are no reported fixed by versions. |
|
CVE-2020-24344
|
Out-of-bounds Read JerryScript is vulnerable to a buffer over-read. | There are no reported fixed by versions. |
|
CVE-2021-41959
|
Missing Release of Memory after Effective Lifetime JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via … | There are no reported fixed by versions. |
|
CVE-2021-41751
|
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecma_builtin_array_prototype_object_slice in … | There are no reported fixed by versions. |
|
CVE-2020-29657
|
Out-of-bounds Read In JerryScript, there is an out-of-bounds read in `main_print_unhandled_exception` in the `main-utils.c` file. | There are no reported fixed by versions. |
|
CVE-2021-43453
|
Out-of-bounds Write A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start … | There are no reported fixed by versions. |
|
CVE-2021-42863
|
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2020-23302
|
Use After Free There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript | |
|
CVE-2020-23322
|
Reachable Assertion There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' in parser_parse_object_initializer … | |
|
CVE-2020-13991
|
Memory corruption `vm/opcodes.c` in JerryScript allows attackers to hijack the flow of control by controlling a register. | |
|
CVE-2020-23303
|
Out-of-bounds Write There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript | |
|
CVE-2020-23320
|
Reachable Assertion There is an Assertion in in `parser_parse_function_arguments` in JerryScript | |
|
CVE-2020-23306
|
Out-of-bounds Write There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript | |
|
CVE-2020-23321
|
Out-of-bounds Write There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in JerryScript | |
|
CVE-2020-23309
|
Reachable Assertion There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript | |
|
CVE-2020-23308
|
Reachable Assertion There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript | |
|
CVE-2020-23323
|
Out-of-bounds Write There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript | |
|
CVE-2020-23311
|
Reachable Assertion There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 … | |
|
CVE-2020-13623
|
Uncontrolled Resource Consumption JerryScript allows attackers to cause a denial of service (stack consumption) via a proxy operation. | |
|
CVE-2020-13622
|
Reachable Assertion JerryScript allows attackers to cause a denial of service (assertion failure) because a property key query for a … | |
|
CVE-2020-23313
|
Reachable Assertion There is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510 in scanner_literal_is_created in JerryScript | |
|
CVE-2020-23310
|
Reachable Assertion There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statement in JerryScript | |
|
CVE-2020-23312
|
Reachable Assertion There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_source in JerryScript | |
|
CVE-2020-23314
|
Reachable Assertion There is an Assertion 'block_found' failed at js-parser-statm.c:2003 parser_parse_try_statement_end in JerryScript | |
|
CVE-2020-23319
|
Reachable Assertion There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE - (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth' … | |
|
CVE-2020-13649
|
NULL Pointer Dereference `parser/js/js-scanner.c` in JerryScript mishandles errors during certain out-of-memory conditions, as demonstrated by a `scanner_reverse_info_list` NULL pointer dereference … | |
|
CVE-2020-14163
|
Improper Restriction of Operations within the Bounds of a Memory Buffer An issue was discovered in `ecma/operations/ecma-container-object.c` in JerryScript. Operations … |