CVE-2024-29489

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-29489
Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecma_get_object_type.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://gist.github.com/gandalf4a/9826a897ae1e3c8d1c7e71a1ec71d415
https://github.com/jerryscript-project/jerryscript/commit/cefd391772529c8a9531d7b3c244d78d38be47c6
https://github.com/jerryscript-project/jerryscript/issues/5101
https://github.com/jerryscript-project/jerryscript/pull/5129
https://gist.github.com/gandalf4a/9826a897ae1e3c8d1c7e71a1ec71d415
https://github.com/jerryscript-project/jerryscript/commit/cefd391772529c8a9531d7b3c244d78d38be47c6
https://github.com/jerryscript-project/jerryscript/issues/5101
https://github.com/jerryscript-project/jerryscript/pull/5129
Configurations

No configuration.

History

21 Nov 2024, 09:08

Type Values Removed Values Added
References () https://gist.github.com/gandalf4a/9826a897ae1e3c8d1c7e71a1ec71d415 - () https://gist.github.com/gandalf4a/9826a897ae1e3c8d1c7e71a1ec71d415 -
References () https://github.com/jerryscript-project/jerryscript/commit/cefd391772529c8a9531d7b3c244d78d38be47c6 - () https://github.com/jerryscript-project/jerryscript/commit/cefd391772529c8a9531d7b3c244d78d38be47c6 -
References () https://github.com/jerryscript-project/jerryscript/issues/5101 - () https://github.com/jerryscript-project/jerryscript/issues/5101 -
References () https://github.com/jerryscript-project/jerryscript/pull/5129 - () https://github.com/jerryscript-project/jerryscript/pull/5129 -

22 Aug 2024, 19:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) Jerryscript 2.4.0 tiene SEGV en ./jerry-core/ecma/base/ecma-helpers.c:238:58 en ecma_get_object_type.
CWE CWE-476

28 Mar 2024, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-28 23:15

Updated : 2024-11-21 09:08

NVD link : CVE-2024-29489

Mitre link : CVE-2024-29489

CVE.ORG link : CVE-2024-29489

JSON object : View

Products Affected

No product.

CWE
CWE-476

NULL Pointer Dereference