Vulnerabilities > Jerryscript > High

DATE CVE VULNERABILITY TITLE RISK
2021-06-10 CVE-2020-23311 Reachable Assertion vulnerability in Jerryscript 2.2.0
There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in JerryScript 2.2.0.
network
low complexity
jerryscript CWE-617
7.5
2021-06-10 CVE-2020-23312 Reachable Assertion vulnerability in Jerryscript 2.2.0
There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_source in JerryScript 2.2.0.
network
low complexity
jerryscript CWE-617
7.5
2021-06-10 CVE-2020-23313 Reachable Assertion vulnerability in Jerryscript 2.2.0
There is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510 in scanner_literal_is_created in JerryScript 2.2.0
network
low complexity
jerryscript CWE-617
7.5
2021-06-10 CVE-2020-23314 Reachable Assertion vulnerability in Jerryscript 2.2.0
There is an Assertion 'block_found' failed at js-parser-statm.c:2003 parser_parse_try_statement_end in JerryScript 2.2.0.
network
low complexity
jerryscript CWE-617
7.5
2021-06-10 CVE-2020-23319 Reachable Assertion vulnerability in Jerryscript 2.2.0
There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE - (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth' in parser_emit_cbc_backward_branch in JerryScript 2.2.0.
network
low complexity
jerryscript CWE-617
7.5
2021-06-10 CVE-2020-23320 Reachable Assertion vulnerability in Jerryscript 2.2.0
There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in parser_parse_function_arguments in JerryScript 2.2.0.
network
low complexity
jerryscript CWE-617
7.5
2021-06-10 CVE-2020-23322 Reachable Assertion vulnerability in Jerryscript 2.2.0
There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' in parser_parse_object_initializer in JerryScript 2.2.0.
network
low complexity
jerryscript CWE-617
7.5
2021-06-10 CVE-2021-26195 Out-of-bounds Write vulnerability in Jerryscript 2.4.0
An issue was discovered in JerryScript 2.4.0.
network
low complexity
jerryscript CWE-787
8.8
2020-09-24 CVE-2020-13991 Unspecified vulnerability in Jerryscript 2.2.0
vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register.
network
low complexity
jerryscript
7.5
2020-08-13 CVE-2020-24345 Out-of-bounds Write vulnerability in Jerryscript
JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a).
local
low complexity
jerryscript CWE-787
7.8