PT-2022-12653
CVE-2021-46339
·
Published
2022-01-20
·
Updated
2022-01-26
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
JerryScript version 3.0.0
Description
The issue is related to an assertion failure in the
ecma new ecma string from utf8 function at /base/ecma-helpers-string.c in JerryScript. The assertion lit is valid cesu8 string (string p, string size) fails, indicating a problem with the validation of CESU-8 strings.Recommendations
For JerryScript version 3.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾