CVE-2021-41752

CRITICAL

9.8

Description

Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt() function.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie4/5/2022

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

jerryscript:jerryscript

Faiblesses (CWE)

CWE-674

References

https://github.com/jerryscript-project/jerryscript/issues/4779(cve@mitre.org)

https://github.com/jerryscript-project/jerryscript/issues/4779(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.