CVE-2021-26199

An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c file.

Source: CVE-2021-26199

CVE-2020-23320

There is an Assertion in ‘context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION’ in parser_parse_function_arguments in JerryScript 2.2.0.

Source: CVE-2020-23320

CVE-2020-23321

There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in JerryScript 2.2.0.

Source: CVE-2020-23321

CVE-2020-23319

There is an Assertion in ‘(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE – (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth’ in parser_emit_cbc_backward_branch in JerryScript 2.2.0.

Source: CVE-2020-23319

CVE-2020-23314

There is an Assertion ‘block_found’ failed at js-parser-statm.c:2003 parser_parse_try_statement_end in JerryScript 2.2.0.

Source: CVE-2020-23314

CVE-2020-23309

There is an Assertion ‘context_p->stack_depth == context_p->context_stack_depth’ failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript 2.2.0.

Source: CVE-2020-23309

CVE-2020-23308

There is an Assertion ‘context_p->stack_top_uint8 == LEXER_EXPRESSION_START’ at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0.

Source: CVE-2020-23308

CVE-2020-23306

There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0.

Source: CVE-2020-23306

CVE-2020-23303

There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript 2.2.0.

Source: CVE-2020-23303

CVE-2020-23302

There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0

Source: CVE-2020-23302