CVE-2024-29489

概要

参考情報

• gist.github.com/gandalf4a/9826a897ae1e3c8d1c7e71a1ec71d415 · Exploit
• jerryscript-project/jerryscript commit cefd391 · Patch
• jerryscript-project/jerryscript · Exploit
• jerryscript-project/jerryscript#5129 · Issue Tracking

jerryscript のその他の脆弱性

• CVE-2024-33260中 5.1Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parser_parse_class at jerry-core/parser/js/j…
• CVE-2024-33259中 5.5Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scanner_seek at jerry-core/parser/js/js-scan…
• CVE-2024-33258高 7.1Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm/vm.c.
• CVE-2024-33255中 6.2Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_strin…
• CVE-2023-36109緊急 9.8Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_ra…