Samsung · Jerryscript · CVE-2017-9250
**Name of the Vulnerable Software and Affected Versions**
JerryScript version 1.0
**Description**
The issue is related to the lexer process char literal function in JerryScript, which does not handle memory allocation for empty strings correctly. This can be exploited by remote attackers using malformed JavaScript source code, leading to a denial of service through a NULL pointer dereference and application crash.
**Recommendations**
For JerryScript version 1.0, consider applying a patch or fix that correctly handles memory allocation for empty strings in the lexer process char literal function to prevent the denial of service.