PT-2023-11642

CVE-2020-23257

·

Published

2023-04-04

·

Updated

2023-04-10

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Espruino version 2v05.41
Description A Buffer Overflow issue allows an attacker to cause a denial of service via the function jsvGarbageCollectMarkUsed in file src/jsvar.c.
Recommendations For Espruino version 2v05.41, consider disabling the jsvGarbageCollectMarkUsed function as a temporary workaround until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')
Related identifiers
CVE-2020-23257
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com