Skip to content
OpenAdvisories
High · 7.8 CVE-2023-31908 EUVD-2023-36197GHSA-fq6f-xcx8-v4xm

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma_builtin_typedarray_prototype_sort.

Published May 10, 2023 · Updated Jan 28, 2025 · Assigned by mitre

Package: iotjs Ecosystem: Ubuntu

Description

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma_builtin_typedarray_prototype_sort.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS iotjs No fix yet —
Ubuntu 18.04 LTS iotjs No fix yet —

References