CVE-2020-14163

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0

Description An issue was discovered in ecma/operations/ecma-container-object.c where operations with key/value pairs did not consider the case where garbage collection is triggered after the key operation but before the value operation. This is demonstrated by improper read access to memory in ecma gc set object visited in ecma/base/ecma-gc.c.

Recommendations For JerryScript version 2.2.0, as a temporary workaround, consider restricting access to the ecma gc set object visited function in ecma/base/ecma-gc.c until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.