PT-2024-25171 · Unknown · Jerryscript

Qbtly · Published 2024-04-26 · Updated 2024-08-01 · CVE-2024-33255

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Jerryscript version cefd391

Description An Assertion Failure was discovered in Jerryscript via ECMA STRING IS REF EQUALS TO ONE (string p) in ecma free string list.

Recommendations For Jerryscript version cefd391, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2024-33255

Affected Products

Jerryscript

References · 8

• 🔥 https://github.com/jerryscript-project/jerryscript/issues/5135 · Exploit
• https://ubuntu.com/security/CVE-2024-33255 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-33255 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-33255 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-33255 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-33255 · Vendor Advisory
• https://twitter.com/CVEnew/status/1783883465315762253 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1783899642586931596 · Twitter Post