First published: Tue Apr 05 2022(Updated: )
Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt() function.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Jerryscript Jerryscript | <2021-10-20 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-41752 is a stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021, due to an unbounded recursive call to the new opt() function.
The severity of CVE-2021-41752 is critical with a CVSS score of 9.8.
CVE-2021-41752 affects Jerryscript versions up to and including the version released on Oct 20, 2021.
The Common Weakness Enumeration (CWE) ID of CVE-2021-41752 is 674.
Yes, the fix for CVE-2021-41752 is available in the commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 of Jerryscript, released on Oct 20, 2021.