First published: Tue Jan 25 2022(Updated: )
Jerryscript v3.0.0 and below was discovered to contain a stack overflow via ecma_find_named_property in ecma-helpers.c.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Jerryscript Jerryscript | =3.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-44988 is a vulnerability in Jerryscript v3.0.0 and below that allows for a stack overflow via ecma_find_named_property in ecma-helpers.c.
CVE-2021-44988 has a severity rating of 7.8 (high).
To fix CVE-2021-44988, you should update to a version of Jerryscript that is above v3.0.0.
You can find more information about CVE-2021-44988 on the Jerryscript GitHub repository and the Samsung Mobile security update website.
The CWE for CVE-2021-44988 is CWE-770 (Allocation of Buffer without Size Checking or Overflow Checking).