Vulnerability index

Browse CVEs

98 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Jerryscript MEDIUM 5.5
CVE-2021-46344

There is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.

Patch available
Fix from $1,600 2022-01-20
Jerryscript MEDIUM 5.5
CVE-2021-46345

There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0.

Patch available
Fix from $1,600 2022-01-20
Jerryscript HIGH 7.5
CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file.

No fix yet
Fix from $1,950 2022-01-14
Jerryscript CRITICAL 9.8
CVE-2020-23321

There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in JerryScript 2.2.0.

Patch available
Fix from $2,300 2021-06-10
Jerryscript CRITICAL 9.8
CVE-2020-23323

There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript 2.2.0.

Patch available
Fix from $2,300 2021-06-10
Jerryscript HIGH 8.8
CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexer_parse_number in js-lexer.c file.

Patch available
Fix from $1,950 2021-06-10
Jerryscript HIGH 7.5
CVE-2020-23313

There is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510 in scanner_literal_is_created in JerryScript 2.2.0

Patch available
Fix from $1,950 2021-06-10
Jerryscript HIGH 7.5
CVE-2020-23314

There is an Assertion 'block_found' failed at js-parser-statm.c:2003 parser_parse_try_statement_end in JerryScript 2.2.0.

Patch available
Fix from $1,950 2021-06-10
Jerryscript HIGH 7.5
CVE-2020-23319

There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE - (flags >> CBC_STACK_ADJUST_SHIFT)) <…

Patch available
Fix from $1,950 2021-06-10
Jerryscript HIGH 7.5
CVE-2020-23320

There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in parser_parse_function_arguments in JerryScript 2.2.0.

Patch available
Fix from $1,950 2021-06-10
Jerryscript HIGH 7.5
CVE-2020-23322

There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA…

Patch available
Fix from $1,950 2021-06-10
Jerryscript MEDIUM 6.5
CVE-2021-26194

An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file.

Patch available
Fix from $1,600 2021-06-10
Jerryscript MEDIUM 6.5
CVE-2021-26197

An issue was discovered in JerryScript 2.4.0. There is a SEGV in main_print_unhandled_exception in main-utils.c file.

Patch available
Fix from $1,600 2021-06-10
Jerryscript MEDIUM 6.5
CVE-2021-26198

An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecma_deref_bigint in ecma-helpers.c file.

Patch available
Fix from $1,600 2021-06-10
Jerryscript MEDIUM 6.5
CVE-2021-26199

An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c file.

Patch available
Fix from $1,600 2021-06-10
Jerryscript CRITICAL 9.8
CVE-2020-23302

There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0

Patch available
Fix from $2,300 2021-06-10
Jerryscript CRITICAL 9.8
CVE-2020-23303

There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript 2.2.0.

Patch available
Fix from $2,300 2021-06-10
Jerryscript CRITICAL 9.8
CVE-2020-23306

There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0.

Patch available
Fix from $2,300 2021-06-10
Jerryscript HIGH 7.5
CVE-2020-23308

There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0.

Patch available
Fix from $1,950 2021-06-10
Jerryscript HIGH 7.5
CVE-2020-23309

There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in Jerry…

Patch available
Fix from $1,950 2021-06-10
Jerryscript HIGH 7.5
CVE-2020-23310

There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statem…

Patch available
Fix from $1,950 2021-06-10
Jerryscript HIGH 7.5
CVE-2020-23311

There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' f…

Patch available
Fix from $1,950 2021-06-10
Jerryscript HIGH 7.5
CVE-2020-23312

There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_source in JerryScript 2.2.0.

Patch available
Fix from $1,950 2021-06-10
Jerryscript CRITICAL 9.1
CVE-2020-29657

In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the main-utils.c file.

Mitigation only
Fix from $2,300 2020-12-09
Jerryscript HIGH 7.5
CVE-2020-13991

vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register.

Patch available
Fix from $1,950 2020-09-24
Jerryscript HIGH 7.8
CVE-2020-24345

JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem …

Fix: after 2.3.0
Fix from $1,950 2020-08-13
Jerryscript HIGH 7.1
CVE-2020-24344

JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read.

Fix: after 2.3.0
Fix from $1,950 2020-08-13
Jerryscript HIGH 7.5
CVE-2020-14163

An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case wh…

Patch available
Fix from $1,950 2020-06-15
Jerryscript HIGH 7.5
CVE-2020-13649

parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_info_list…

Patch available
Fix from $1,950 2020-05-28
Jerryscript HIGH 7.5
CVE-2020-13622

JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key query for a Proxy object returns unintende…

Patch available
Fix from $1,950 2020-05-27