CVE-2020-23308

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0

Description The issue is related to the parser parse expression function in the js-parser-expr.c component of the JerryScript JavaScript engine for Internet of Things (IoT) devices. It is caused by insufficient use of the assert() function. Exploitation of this issue could allow a remote attacker to cause a denial of service.

Recommendations For JerryScript version 2.2.0, consider disabling the parser parse expression function as a temporary workaround until a patch is available. Restrict access to the js-parser-expr.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.