Skip to content
OpenAdvisories
Unscored CVE-2021-41959 EUVD-2021-28952GHSA-cwgv-434w-9fvv

JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.…

Published May 3, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, which causes a memory leak.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS iotjs No fix yet —

References