CVE-2021-42863

Critical

Description

A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.

SeverityCritical
CVSS9.8
Exploit probability—
ProductJerryscript
PublishedMay 12, 2022
First seenMay 12, 2022

How to fix

Update
  • jerryscript jerryscript2021-10-15 or later

Affected products

ProductAffected versionsFixed in
jerryscript jerryscriptv < 2021-10-152021-10-15

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-42863 · Jerryscript · Dark Radar