CVE-2021-42863: Jerryscript

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.

Affected products

  • Jerryscript Jerryscript: before 2021-10-15 (fixed in 2021-10-15)

Published 2022-05-12. Last modified 2026-06-17.