Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Marcin Dominiak

#41311of 53,635
6.5Total CVSS
Vulnerabilities · 1
PT-2018-9489
6.5
2018-08-20
Samsung · Jerryscript · CVE-2018-1000636
**Name of the Vulnerable Software and Affected Versions** JerryScript versions prior to the version containing commit 87897849f6879df10e8ad68a41bf8cf507edf710 **Description** The issue is a NULL Pointer Dereference that can cause a crash due to a segmentation fault. This occurs when undefined behavior is triggered by passing NULL to `memcpy` as the 2nd argument in the `ecma-builtin-typedarray-prototype.c` file, resulting in a null pointer dereference at `jmem-heap.c`. The attack is exploitable via specially crafted JavaScript code that the victim must execute. **Recommendations** For JerryScript versions prior to the version containing commit 87897849f6879df10e8ad68a41bf8cf507edf710, update to a version that includes the fix for this issue.