CVE-2018-11418

Name of the Vulnerable Software and Affected Versions JerryScript version 1.0

Description An issue was discovered in JerryScript, where a heap-based buffer over-read occurs in the lit read code unit from utf8 function. This is related to the re parse char class function in re-parser.c and can be triggered via a RegExp("[u0020") payload.

Recommendations For JerryScript version 1.0, consider restricting the use of the lit read code unit from utf8 function until a patch is available. As a temporary workaround, avoid using the RegExp("[u0020") payload in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.