Skip to contentJerryscript vulnerabilities
Newest
- jerryscriptThere is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma...CVE-2021-463485.5 Medium
- jerryscriptThere is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma...CVE-2021-463475.5 Medium
- jerryscriptThere is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at ...CVE-2021-463465.5 Medium
- jerryscriptThere is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in...CVE-2021-463455.5 Medium
- jerryscriptThere is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js...CVE-2021-463445.5 Medium
- jerryscriptThere is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js...CVE-2021-463435.5 Medium
- jerryscriptThere is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array ...CVE-2021-463425.5 Medium
- jerryscriptThere is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p-...CVE-2021-463405.5 Medium
- jerryscriptThere is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma...CVE-2021-463395.5 Medium
- jerryscriptThere is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c...CVE-2021-463385.5 Medium
- jerryscriptThere is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in...CVE-2021-463375.5 Medium
- jerryscriptThere is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser...CVE-2021-463365.5 Medium
- jerryscriptAn issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in...CVE-2021-461707.5 High
- jerryscriptAn issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref...CVE-2021-261996.5 Medium
- jerryscriptAn issue was discovered in JerryScript 2.4.0. There is a SEVG in ecma_deref_bigint in ecma...CVE-2021-261986.5 Medium
- jerryscriptAn issue was discovered in JerryScript 2.4.0. There is a SEGV in main_print_unhandled_exception...CVE-2021-261976.5 Medium
- jerryscriptAn issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in...CVE-2021-261958.8 High
- jerryscriptAn issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in...CVE-2021-261946.5 Medium
- jerryscriptThere is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript 2.2.0.CVE-2020-233239.8 Critical
- jerryscriptThere is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type ==...CVE-2020-233227.5 High
- jerryscriptThere is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in...CVE-2020-233219.8 Critical
- jerryscriptThere is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in...CVE-2020-233207.5 High
- jerryscriptThere is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || ...CVE-2020-233197.5 High
- jerryscriptThere is an Assertion 'block_found' failed at js-parser-statm.c:2003...CVE-2020-233147.5 High
- jerryscriptThere is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510...CVE-2020-233137.5 High
- jerryscriptThere is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c...CVE-2020-233127.5 High
- jerryscriptThere is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type ==...CVE-2020-233117.5 High
- jerryscriptThere is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at...CVE-2020-233107.5 High
- jerryscriptThere is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js...CVE-2020-233097.5 High
- jerryscriptThere is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c...CVE-2020-233087.5 High
- jerryscriptThere is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0.CVE-2020-233069.8 Critical
- jerryscriptThere is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript...CVE-2020-233039.8 Critical
- jerryscriptThere is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in...CVE-2020-233029.8 Critical
- jerryscriptIn JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the...CVE-2020-296579.1 Critical
- jerryscriptvm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a...CVE-2020-139917.5 High
- jerryscriptJerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read.CVE-2020-243447.1 High
- jerryscript** DISPUTED ** JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy...CVE-2020-24345Disputed7.8 High
- jerryscriptAn issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0....CVE-2020-141637.5 High
- jerryscriptparser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory...CVE-2020-136497.5 High
- jerryscriptJerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a...CVE-2020-136227.5 High
- jerryscriptJerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy...CVE-2020-136237.5 High
- jerryscriptJerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The...CVE-2019-10101769.8 Critical
- jerryscriptJerryScript version Tested on commit f86d7459d195c8ba58479d1861b0cc726c8b3793. Analysing history...CVE-2018-10006366.5 Medium
- jerryscriptAn issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the...CVE-2018-114199.8 Critical
- jerryscriptAn issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the...CVE-2018-114189.8 Critical
- jerryscriptAn issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the...CVE-2017-182129.8 Critical
- jerryscriptJerryScript 1.0 allows remote attackers to cause a denial of service ...CVE-2017-147497.8 High
- jerryscriptThe lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0...CVE-2017-92507.5 High