CVE-2023-31906: Jerryscript

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jerry-core/parser/js/js-lexer.c.

Affected products

• Jerryscript Jerryscript: version 3.0.0 only

Published 2023-05-10. Last modified 2026-06-17.