Vulnerabilities > CVE-2018-11591 - NULL Pointer Dereference vulnerability in Espruino

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

espruino

CWE-476

NVD

Published: 2018-05-31

Updated: 2018-06-08

Summary

Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via a NULL pointer dereference during syntax parsing. This was addressed by adding validation for a debug trace print statement in jsvar.c.

Vulnerable Configurations

Part	Description	Count
OS	Espruino Espruino Espruino 1.44 Espruino Espruino 1.58 Espruino Espruino 1.59 Espruino Espruino 1.62 Espruino Espruino 1.64 Espruino Espruino 1.65 Espruino Espruino 1.66 Espruino Espruino 1.67 Espruino Espruino 1.68 Espruino Espruino 1.69 Espruino Espruino 1.70 Espruino Espruino 1.71 Espruino Espruino 1.72 Espruino Espruino 1.73 Espruino Espruino 1.74 Espruino Espruino 1.75 Espruino Espruino 1.76 Espruino Espruino 1.77 Espruino Espruino 1.78 Espruino Espruino 1.79 Espruino Espruino 1.80 Espruino Espruino 1.81 Espruino Espruino 1.82 Espruino Espruino 1.83 Espruino Espruino 1.84 Espruino Espruino 1.85 Espruino Espruino 1.86 Espruino Espruino 1.87 Espruino Espruino 1.88 Espruino Espruino 1.89 Espruino Espruino 1.90 Espruino Espruino 1.91 Espruino Espruino 1.92 Espruino Espruino 1.93 Espruino Espruino 1.94 Espruino Espruino 1.95 Espruino Espruino 1.96 Espruino Espruino 1.97	38

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References