CVE-2021-42863: Jerryscript
Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.
A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.
Affected products
- Jerryscript Jerryscript: before 2021-10-15 (fixed in 2021-10-15)
Published 2022-05-12. Last modified 2026-06-17.