CVE-2019-1010176: Jerryscript

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component is: function lit_char_to_utf8_bytes (jerry-core/lit/lit-char-helpers.c:377). The attack vector is: executing crafted javascript code. The fixed version is: after commit 505dace719aebb3308a3af223cfaa985159efae0.

Affected products

• Jerryscript Jerryscript: before 2.0 (fixed in 2.0)

Published 2019-07-25. Last modified 2026-06-17.