PT-2021-10808 · Espruino · Espruino

Bird8693 · Published 2021-07-13 · Updated 2021-07-15 · CVE-2020-22884

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Espruino versions prior to RELEASE 2V09

Description A buffer overflow issue exists in the jsvGetStringChars function, allowing remote attackers to execute arbitrary code.

Recommendations For versions prior to RELEASE 2V09, update to RELEASE 2V09 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-22884

Affected Products

Espruino

References · 3

• 🔥 https://github.com/espruino/Espruino/issues/1799 · Exploit
• https://osv.dev/vulnerability/CVE-2020-22884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-22884 · Security Note