Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Jie Ding

Pesquisador deHKU S3Lab
#24221de 53,638
9.8CVSS total
Vulnerabilidades · 1
PT-2023-25431
9.8
2023-09-19
Unknown · Jerryscript · CVE-2023-36109
**Name of the Vulnerable Software and Affected Versions** JerryScript version 3.0 **Description** The issue allows remote attackers to execute arbitrary code via the `ecma stringbuilder append raw` component at `/jerry-core/ecma/base/ecma-helpers-string.c`. This is a Buffer Overflow vulnerability. **Recommendations** For JerryScript version 3.0, consider disabling the `ecma stringbuilder append raw` component as a temporary workaround until a patch is available. Restrict access to the `/jerry-core/ecma/base/ecma-helpers-string.c` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.