Vulnerabilities > CVE-2017-9250 - NULL Pointer Dereference vulnerability in Jerryscript 1.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
jerryscript
CWE-476
NVD
Published: 2017-05-28
Updated: 2024-11-21

Summary

The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript source code, related to the jmem_heap_free_block function.

Vulnerable Configurations

Part Description Count
Application
Jerryscript
1

Common Weakness Enumeration (CWE)

References