CVE-2023-31906
Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jerry-core/...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jerry-core/parser/js/js-lexer.c.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com