Skip to content
Noroxi

JerryScript records

98 published records for vendor jerryscript.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

98 records
  • CVE-2019-1010176
    40Plan

    JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow.

    CriticalCVSS 9.8No exploitEPSS 3%

    jerryscript · jerryscriptJul 25, 2019

  • CVE-2023-36109
    40Plan

    Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_ra

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    jerryscript · jerryscriptSep 20, 2023

  • CVE-2017-18212
    40Plan

    An issue was discovered in JerryScript 1.0.

    CriticalCVSS 9.8No exploitEPSS 2%

    jerryscript · jerryscriptMar 1, 2018

  • CVE-2021-42863
    40Plan

    A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object

    CriticalCVSS 9.8No exploitEPSS 2%

    jerryscript · jerryscriptMay 12, 2022

  • CVE-2018-11419
    39Monitor

    An issue was discovered in JerryScript 1.0.

    CriticalCVSS 9.8No exploitEPSS 2%

    jerryscript · jerryscriptMay 24, 2018

  • CVE-2018-11418
    39Monitor

    An issue was discovered in JerryScript 1.0.

    CriticalCVSS 9.8No exploitEPSS 2%

    jerryscript · jerryscriptMay 24, 2018

  • CVE-2023-38961
    39Monitor

    Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_

    CriticalCVSS 9.8No exploitEPSS 1%

    jerryscript · jerryscriptAug 21, 2023

  • CVE-2020-23303
    39Monitor

    There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript 2.2.0.

    CriticalCVSS 9.8No exploitEPSS 1%

    jerryscript · jerryscriptJun 10, 2021

  • CVE-2020-22597
    39Monitor

    An issue in Jerrscript- project Jerryscrip v.

    CriticalCVSS 9.8No exploitEPSS 1%

    jerryscript · jerryscriptJul 3, 2023

  • CVE-2020-23321
    39Monitor

    There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in JerryScript 2.2.0.

    CriticalCVSS 9.8No exploitEPSS 1%

    jerryscript · jerryscriptJun 10, 2021

  • CVE-2020-23323
    39Monitor

    There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript 2.2.0.

    CriticalCVSS 9.8No exploitEPSS 1%

    jerryscript · jerryscriptJun 10, 2021

  • CVE-2020-23306
    39Monitor

    There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0.

    CriticalCVSS 9.8No exploitEPSS 1%

    jerryscript · jerryscriptJun 10, 2021

  • CVE-2020-23302
    39Monitor

    There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0

    CriticalCVSS 9.8No exploitEPSS 1%

    jerryscript · jerryscriptJun 10, 2021

  • CVE-2021-43453
    39Monitor

    A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_stat

    CriticalCVSS 9.8No exploitEPSS 1%

    jerryscript · jerryscriptApr 7, 2022

  • CVE-2021-41751
    39Monitor

    Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecma_builtin_array_prototype_object_slice in Jerryscrip

    CriticalCVSS 9.8No exploitEPSS 1%

    jerryscript · jerryscriptApr 5, 2022

  • CVE-2021-41752
    39Monitor

    Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recur

    CriticalCVSS 9.8No exploitEPSS 1%

    jerryscript · jerryscriptApr 5, 2022

  • CVE-2020-29657
    36Monitor

    In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the main-utils.c file.

    CriticalCVSS 9.1No exploitEPSS 1%

    jerryscript · jerryscriptDec 9, 2020

  • CVE-2021-26195
    35Monitor

    An issue was discovered in JerryScript 2.4.0.

    HighCVSS 8.8No exploitEPSS 1%

    jerryscript · jerryscriptJun 10, 2021

  • CVE-2017-14749
    32Monitor

    JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly exe

    HighCVSS 7.8No exploitEPSS 2%

    jerryscript · jerryscriptSep 26, 2017

  • CVE-2017-9250
    31Monitor

    The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty stri

    HighCVSS 7.5No exploitEPSS 2%

    jerryscript · jerryscriptMay 28, 2017

  • CVE-2020-13991
    31Monitor

    vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register.

    HighCVSS 7.5No exploitEPSS 2%

    jerryscript · jerryscriptSep 24, 2020

  • CVE-2020-13649
    31Monitor

    parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_

    HighCVSS 7.5No exploitEPSS 2%

    jerryscript · jerryscriptMay 28, 2020

  • CVE-2021-44988
    31Monitor

    Jerryscript v3.0.0 and below was discovered to contain a stack overflow via ecma_find_named_property in ecma-helpers.c.

    HighCVSS 7.8No exploitEPSS 1%

    jerryscript · jerryscriptJan 24, 2022

  • CVE-2022-22895
    31Monitor

    Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-hel

    HighCVSS 7.8No exploitEPSS 1%

    jerryscript · jerryscriptJan 20, 2022

  • CVE-2020-24345
    31Monitor

    JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a).

    HighCVSS 7.8No exploitEPSS 1%

    jerryscript · jerryscriptAug 13, 2020