CVE-2021-41752

CRITICAL

9.8

Description

Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt() function.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published4/5/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

jerryscript:jerryscript

Weaknesses (CWE)

CWE-674

References

https://github.com/jerryscript-project/jerryscript/issues/4779(cve@mitre.org)

https://github.com/jerryscript-project/jerryscript/issues/4779(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.