CVE-2021-43453: Jerryscript

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start in the js-parser-statm.c file. This issue is similar to CVE-2020-29657.

Affected products

• Jerryscript Jerryscript: up to and including 2.4.0

Published 2022-04-07. Last modified 2026-06-17.