PT-2022-12654 · Unknown · Jerryscript

Published 2022-01-20 · Updated 2022-01-26 · CVE-2021-46340

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0

Description An assertion failure occurs in the scanner scan statement end function at /parser/js/js-scanner.c due to an invalid state. This issue is related to the scanning of statement endings in the JavaScript parser.

Recommendations For JerryScript version 3.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2021-46340

Affected Products

Jerryscript

References · 6

• 🔥 https://github.com/jerryscript-project/jerryscript/issues/4924 · Exploit
• https://osv.dev/vulnerability/CVE-2021-46340 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46340 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46340 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-46340 · Security Note
• https://ubuntu.com/security/CVE-2021-46340 · Vendor Advisory