CVE-2020-23302: Jerryscript

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0

Affected products

• Jerryscript Jerryscript: version 2.2.0 only

Published 2021-06-10. Last modified 2026-06-17.