Unscored CVE-2018-20201 EUVD-2018-12768GHSA-24g6-h5ch-r4vh

There is a stack-based buffer over-read in the jsfNameFromString function of jsflash.c in Espruino 2V00, leading to a denial of service or …

Published Dec 18, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

There is a stack-based buffer over-read in the jsfNameFromString function of jsflash.c in Espruino 2V00, leading to a denial of service or possibly unspecified other impact via a crafted js file.

References

https://github.com/espruino/Espruino/issues/1587