Ejueon

**Name of the Vulnerable Software and Affected Versions** Jsish version 3.5.0 **Description** A heap-buffer-overflow issue was discovered in Jsish. The issue is located in ./src/jsiUtils.c. **Recommendations** For Jsish version 3.5.0, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Jsish version 3.5.0 **Description** A stack-overflow issue was discovered in Jsish via the `IterGetKeysCallback` component at `/jsish/src/jsiValue.c`. **Recommendations** For Jsish version 3.5.0, consider disabling the `IterGetKeysCallback` component as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jsish version 3.5.0 **Description** A use-after-free issue was discovered in Jsish via the SplitChar at ./src/jsiUtils.c. **Recommendations** For Jsish version 3.5.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 (commit 05dbbd1) **Description** The issue is related to an Assertion Failure in the `parser parse for statement start` function at `jerry-core/parser/js/js-parser-statm.c`. This failure can occur due to a problem in the parsing mechanism of Jerryscript. **Recommendations** For Jerryscript version 3.0 (commit 05dbbd1), consider disabling the `parser parse for statement start` function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 (commit 05dbbd1) **Description** An Assertion Failure was discovered in Jerryscript via the `ecma property hashmap create` function at `jerry-core/ecma/base/ecma-property-hashmap.c`. **Recommendations** For Jerryscript version 3.0 (commit 05dbbd1), consider disabling the `ecma property hashmap create` function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 (commit 05dbbd1) **Description** An Assertion Failure was discovered in Jerryscript via the `vm loop` at `jerry-core/vm/vm.c`. **Recommendations** For Jerryscript version 3.0 (commit 05dbbd1), consider restricting access to the `vm loop` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 (commit 05dbbd1) **Description** An Assertion Failure was discovered in Jerryscript via the `ecma big uint div mod` function at `jerry-core/ecma/operations/ecma-big-uint.c`. **Recommendations** For Jerryscript version 3.0 (commit 05dbbd1), consider restricting the use of the `ecma big uint div mod` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** QuickJS version 2788d71 **Description** A stack-overflow issue was discovered in QuickJS via the `js proxy isArray` component at quickjs.c. **Recommendations** For QuickJS version 2788d71, consider disabling the `js proxy isArray` function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 (commit 05dbbd1) **Description** An Assertion Failure was discovered in Jerryscript via the `jcontext raise exception` at `jerry-core/jcontext/jcontext.c`. **Recommendations** For Jerryscript version 3.0 (commit 05dbbd1), consider restricting access to the `jcontext raise exception` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 *commit 1a2c047) **Description** An Assertion Failure was discovered in Jerryscript via the component `parser parse class` at `jerry-core/parser/js/js-parser-expr.c`. **Recommendations** For Jerryscript version 3.0 *commit 1a2c047), consider restricting access to the `parser parse class` component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 (commit 05dbbd1) **Description** The issue is related to an out-of-memory problem in the `malloc` function. **Recommendations** For Jerryscript version 3.0 (commit 05dbbd1), consider restricting memory allocation to prevent out-of-memory issues until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 (commit 1a2c047) **Description** An Assertion Failure was discovered in Jerryscript via the `jmem heap finalize` function at `jerry-core/jmem/jmem-heap.c`. **Recommendations** For Jerryscript version 3.0 (commit 1a2c047), consider disabling the `jmem heap finalize` function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 (commit 1a2c047) **Description** An Assertion Failure was discovered in Jerryscript via the `parser parse function arguments` at `jerry-core/parser/js/js-parser.c`. **Recommendations** For Jerryscript version 3.0 (commit 1a2c047), consider restricting access to the `parser parse function arguments` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0.0(commit 1a2c047) **Description** A heap-buffer-overflow issue was discovered in the `lexer compare identifier to chars` component at `/jerry-core/parser/js/js-lexer.c`. This issue affects the lexer functionality of the software. **Recommendations** For Jerryscript version 3.0.0(commit 1a2c047), consider restricting access to the `lexer compare identifier to chars` component until a patch is available. As a temporary workaround, avoid using the affected functionality in the `/jerry-core/parser/js/js-lexer.c` file. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 (commit 05dbbd1) **Description** A heap-buffer-overflow issue was discovered in the parser parse function statement component at /jerry-core/parser/js/js-parser-statm.c. This issue affects the parsing of function statements. **Recommendations** For Jerryscript version 3.0 (commit 05dbbd1), consider restricting access to the parser parse function statement component until a patch is available. As a temporary workaround, avoid using the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0 (commit 05dbbd1) **Description** A heap-buffer-overflow issue was discovered in the ecma builtin typedarray prototype sort component. **Recommendations** For Jerryscript version 3.0 (commit 05dbbd1), as a temporary workaround, consider disabling the `ecma builtin typedarray prototype sort` component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jerryscript version 3.0.0 **Description** A heap-buffer-overflow issue was discovered in Jerryscript via the component `scanner literal is created` at `/jerry-core/parser/js/js-scanner-util.c`. **Recommendations** For Jerryscript version 3.0.0, consider restricting access to the `scanner literal is created` component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.