Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jeffjerseycow

#36293of 53,632
7.5Total CVSS
Vulnerabilities · 1
PT-2017-18806
7.5
2017-05-28
Samsung · Jerryscript · CVE-2017-9250
**Name of the Vulnerable Software and Affected Versions** JerryScript version 1.0 **Description** The issue is related to the lexer process char literal function in JerryScript, which does not handle memory allocation for empty strings correctly. This can be exploited by remote attackers using malformed JavaScript source code, leading to a denial of service through a NULL pointer dereference and application crash. **Recommendations** For JerryScript version 1.0, consider applying a patch or fix that correctly handles memory allocation for empty strings in the lexer process char literal function to prevent the denial of service.