CVE-2018-11596: Buffer Overflow
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because a check for '\0' is made for the wrong array element in jsvar.c.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-11596?
CVE-2018-11596 is a vulnerability in Espruino before version 1.99 that allows attackers to cause a denial of service (application crash) through a Buffer Overflow during syntax parsing.
How severe is CVE-2018-11596?
CVE-2018-11596 has a severity score of 5.5, which is considered medium.
How can attackers exploit CVE-2018-11596?
Attackers can exploit CVE-2018-11596 by providing a user-crafted input file that triggers a Buffer Overflow during syntax parsing in Espruino.
Which software versions are affected by CVE-2018-11596?
Espruino versions up to (but not including) 1.99 are affected by CVE-2018-11596.
Is there a fix for CVE-2018-11596?
Yes, CVE-2018-11596 has been fixed in version 1.99 of Espruino.