Espruino · Espruino · CVE-2018-20201
**Name of the Vulnerable Software and Affected Versions**
Espruino version 2V00
**Description**
The issue is related to a stack-based buffer over-read in the `jsfNameFromString` function, located in the jsflash.c file. This can lead to a denial of service or potentially other unspecified impacts when a crafted js file is used.
**Recommendations**
For Espruino version 2V00, consider avoiding the use of crafted js files until a patch is available. As a temporary workaround, restricting access to the `jsfNameFromString` function may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.