Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:conan/jerryscript@2.4.0
purl pkg:conan/jerryscript@2.4.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (13)
Advisory Summary Fixed in package version
CVE-2021-41682

Use After Free There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecma_compare_ecma_non_direct_strings in JerryScript 2.4.0 There are no reported fixed by versions.
CVE-2022-22901

Reachable Assertion There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at parser_parse_function_arguments in /js/js-parser.c of JerryScript commit a6ab5e9. There are no reported fixed by versions.
CVE-2021-41683

Out-of-bounds Write There is a stack-overflow at ecma-helpers.c:326 in ecma_get_lex_env_type in JerryScript 2.4.0 There are no reported fixed by versions.
CVE-2021-26199

Use After Free An issue was discovered in JerryScript There is a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c file. There are no reported fixed by versions.
CVE-2021-26197

Improper Check for Unusual or Exceptional Conditions An issue was discovered in JerryScript There is a SEGV in main_print_unhandled_exception in … There are no reported fixed by versions.
CVE-2022-32117

Out-of-bounds Write Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryx_print_unhandled_exception in /util/print.c. There are no reported fixed by versions.
CVE-2021-41959

Missing Release of Memory after Effective Lifetime JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via … There are no reported fixed by versions.
CVE-2021-41751

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecma_builtin_array_prototype_object_slice in … There are no reported fixed by versions.
CVE-2021-43453

Out-of-bounds Write A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start … There are no reported fixed by versions.
CVE-2021-26198

Improper Restriction of Operations within the Bounds of a Memory Buffer An issue was discovered in JerryScript. There is a … There are no reported fixed by versions.
CVE-2021-26195

Out-of-bounds Write An issue was discovered in JerryScript There is a heap-buffer-overflow in lexer_parse_number in js-lexer.c file. There are no reported fixed by versions.
CVE-2021-26194

Use After Free An issue was discovered in JerryScript There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file. There are no reported fixed by versions.
CVE-2021-42863

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2021-46170
Use After Free An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file.