GitHub Advisoryadvisory · NuGet

GHSA-jgrp-6qqq-3284 Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption

HIGH Published 2022-05-24 Modified 2022-08-30 Official page ↗
Aliases
CVE-2021-42279
Ecosystem
NuGet
Packages
Microsoft.ChakraCore
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-787
Reviewed
2022-08-30

Affected packages

• NuGet Microsoft.ChakraCore: <= 1.11.24 (no fix yet)

Description

Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due to an out-of-bounds write. The Microsoft advisory for CVE-2021-42279 was modified in August 2022 to include Microsoft.ChakraCore as an affected product.

Related

Alias · CVE (1)

  • CVE-2021-42279 Chakra Scripting Engine Memory Corruption Vulnerability vulnerability

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References