Skip to content
OpenAdvisories
Unscored CVE-2021-41682 EUVD-2021-28694GHSA-hwj8-33pv-37r3

There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecma_compare_ecma_non_direct_strings in JerryScript 2.4.0

Published Jun 20, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Package: iotjs Ecosystem: Ubuntu

Description

There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecma_compare_ecma_non_direct_strings in JerryScript 2.4.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS iotjs No fix yet —
Ubuntu 18.04 LTS iotjs No fix yet —

References