CVE-2021-26195

Name of the Vulnerable Software and Affected Versions JerryScript version 2.4.0

Description The issue is related to a heap-buffer-overflow in the lexer parse number function in the js-lexer.c file. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For JerryScript version 2.4.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the lexer parse number function in the js-lexer.c file until a patch is available. Restrict access to the js-lexer.c file to minimize the risk of exploitation. Avoid using the lexer parse number function in the affected JerryScript version until the issue is resolved.