jerryscript Vulnerability Advisory Catalog

Total 98 security vulnerabilities recorded for jerryscript software and firmware.

← Back to All Vendors
Component: jerryscript

Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma_op_function_construct at /operations/ecma-function-object...

📅 2023-04-24
CVSS 5.5 Dossier →
Component: jerryscript

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry....

📅 2023-04-24
CVSS 5.5 Dossier →
Component: jerryscript

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecma_find_named_property at /base/ecma-helpers.c....

📅 2023-04-24
CVSS 5.5 Dossier →
Component: jerryscript

Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryx_print_unhandled_exception in /util/print.c....

📅 2022-07-13
CVSS 7.8 Dossier →
Component: jerryscript

There is a stack-overflow at ecma-helpers.c:326 in ecma_get_lex_env_type in JerryScript 2.4.0...

📅 2022-06-20
CVSS 7.8 Dossier →
Component: jerryscript

There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecma_compare_ecma_non_direct_strings in JerryScript 2.4.0...

📅 2022-06-20
CVSS 7.8 Dossier →
CVE-2021-42863 CRITICAL
Component: jerryscript

A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake...

📅 2022-05-12
CVSS 9.8 Dossier →
Component: jerryscript

JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after Reg...

📅 2022-05-03
CVSS 7.5 Dossier →
CVE-2021-43453 CRITICAL
Component: jerryscript

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_star...

📅 2022-04-07
CVSS 9.8 Dossier →
CVE-2021-41752 CRITICAL
Component: jerryscript

Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call ...

📅 2022-04-05
CVSS 9.8 Dossier →
CVE-2021-41751 CRITICAL
Component: jerryscript

Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecma_builtin_array_prototype_object_slice in Jerryscript before c...

📅 2022-04-05
CVSS 9.8 Dossier →
Component: jerryscript

There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at parser_parse_function_arguments in /js/js-parser.c ...

📅 2022-02-17
CVSS 5.5 Dossier →
Component: jerryscript

There is an Assertion ''JERRY_CONTEXT (jmem_heap_allocated_size) == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerryscript 3.0.0....

📅 2022-01-25
CVSS 5.5 Dossier →
Component: jerryscript

There is an Assertion ''ecma_is_value_boolean (base_value)'' failed at /jerry-core/ecma/operations/ecma-get-put-value.c in Jerryscript 3.0.0....

📅 2022-01-25
CVSS 5.5 Dossier →
Component: jerryscript

There is an Assertion ''ecma_object_is_typedarray (obj_p)'' failed at /jerry-core/ecma/operations/ecma-typedarray-object.c in Jerryscript 3.0.0....

📅 2022-01-25
CVSS 5.5 Dossier →
Component: jerryscript

Jerryscript v3.0.0 and below was discovered to contain a stack overflow via ecma_find_named_property in ecma-helpers.c....

📅 2022-01-25
CVSS 7.8 Dossier →
Component: jerryscript

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conve...

📅 2022-01-21
CVSS 7.8 Dossier →
Component: jerryscript

Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c....

📅 2022-01-21
CVSS 7.8 Dossier →
Component: jerryscript

Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c....

📅 2022-01-21
CVSS 7.8 Dossier →
Component: jerryscript

There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) ...

📅 2022-01-21
CVSS 5.5 Dossier →
Component: jerryscript

Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecma_ref_object_inline in /jerry-core/ecma/base/ecma-gc.c....

📅 2022-01-21
CVSS 5.5 Dossier →
Component: jerryscript

There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' failed at /jerry-core/parser...

📅 2022-01-20
CVSS 5.5 Dossier →
Component: jerryscript

Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c....

📅 2022-01-20
CVSS 7.8 Dossier →
Component: jerryscript

There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-pr...

📅 2022-01-20
CVSS 5.5 Dossier →
Page 2 of 5 (98 Total Records)