CVE-2024-32669CWE-125CWE-20CWE-787
Possible stack overflow due to a string encoding processing error
Medium · published May 9, 2024
What it is
Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers.
However, it occurs in the test code and does not include in the release.
This issue affects escargot: 4.0.0.
The record
Technical detail
- CVSS v3.1
- 5.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00649 · 50.5th percentile
- Weaknesses
- CWE-125 · Out-of-bounds Read; CWE-20 · Improper Input Validation; CWE-787 · Out-of-bounds Write
- Published
- 2024-05-09T06:02Z
EPSS history
Timeline