PT-2023-23522 · Unknown · Jerryscript

Ejueon + 1 · Published 2023-05-12 · Updated 2023-05-18 · CVE-2023-31921

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0 (commit 05dbbd1)

Description An Assertion Failure was discovered in Jerryscript via the ecma big uint div mod function at jerry-core/ecma/operations/ecma-big-uint.c.

Recommendations For Jerryscript version 3.0 (commit 05dbbd1), consider restricting the use of the ecma big uint div mod function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2023-31921

Affected Products

Jerryscript

References · 4

• 🔥 https://github.com/jerryscript-project/jerryscript/issues/5068 · Exploit
• https://osv.dev/vulnerability/CVE-2023-31921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31921 · Security Note
• https://t.me/cibsecurity/64029 · Telegram Post