JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option
References
Link | Resource |
---|---|
https://github.com/jerryscript-project/jerryscript/issues/3977 | Exploit Issue Tracking Patch Third Party Advisory |
Configurations
History
07 Nov 2023, 03:19
Type | Values Removed | Values Added |
---|---|---|
Summary | JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option |
Information
Published : 2020-08-13 19:15
Updated : 2024-04-11 01:07
NVD link : CVE-2020-24345
Mitre link : CVE-2020-24345
CVE.ORG link : CVE-2020-24345
JSON object : View
Products Affected
jerryscript
- jerryscript
CWE
CWE-787
Out-of-bounds Write