First published: Thu Jun 10 2021(Updated: )
There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript 2.2.0.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Jerryscript Jerryscript | =2.2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-23323 is critical.
The affected software for CVE-2020-23323 is JerryScript version 2.2.0.
To fix the heap-buffer-overflow vulnerability in JerryScript 2.2.0, update to a newer version when available and apply any patches provided by the vendor.
The CWE ID for CVE-2020-23323 is CWE-787.
You can find more information about CVE-2020-23323 at the following link: [GitHub Issue](https://github.com/jerryscript-project/jerryscript/issues/3871).