Search results

lexer_construct_number_object casts oversized numeric literal to int32 -> UBSan float-cast-overflow (SIGILL) (CWE-681)

Status: Open.

#5304 In jerryscript-project/jerryscript;

· 1820893135-pixel opened on Aug 11, 2026

ecma_make_number_value casts out-of-range double to integer -> UBSan float-cast-overflow (SIGILL) (CWE-681)

Status: Open.

#5303 In jerryscript-project/jerryscript;

· 1820893135-pixel opened on Aug 11, 2026

Malformed snapshot bytecode drives VM-init stack-buffer-overflow (vm_init_exec, vm.c:5190) (CWE-125)

Status: Open.

#5302 In jerryscript-project/jerryscript;

· 1820893135-pixel opened on Aug 11, 2026

Snapshot deserialization lacks bounds checks on untrusted offset/length fields -> out-of-bounds read (SEGV / ASan use-after-poison / DoS) (CWE-125)

Status: Open.

#5301 In jerryscript-project/jerryscript;

· 1820893135-pixel opened on Aug 11, 2026

Ungraceful handling of stack overflow

Status: Open.

#5300 In jerryscript-project/jerryscript;

· wintered opened on Jul 18, 2026

Unusual Multithreading API

Status: Open.

#5298 In jerryscript-project/jerryscript;

· HumanBodyMacAndCheese opened on Jul 1, 2026

JerryScript: Proxy getOwnPropertyDescriptor invariant check misses descriptor defaults

Status: Open.

#5297 In jerryscript-project/jerryscript;

· shi-bohao opened on Jun 20, 2026

JerryScript: Proxy deleteProperty invariant checks can raise two exceptions and abort debug builds

Status: Open.

#5296 In jerryscript-project/jerryscript;

· shi-bohao opened on Jun 20, 2026

JerryScript: malformed snapshot literal offset causes out-of-bounds read in ecma_snapshot_get_literal

Status: Open.

#5295 In jerryscript-project/jerryscript;

· shi-bohao opened on Jun 20, 2026

JerryScript: configurable module namespace re-export causes type confusion and crash

Status: Open.

#5294 In jerryscript-project/jerryscript;

· shi-bohao opened on Jun 20, 2026

jerryscript jerry-snapshot tool: unbounded literals-list parser → global-buffer-overflow (OOB write) in process_generate

Status: Open.

#5293 In jerryscript-project/jerryscript;

· h0rk1p opened on Jun 20, 2026

jerryscript: NULL-pointer dereference in ES-module linker (ecma_module_resolve_import) via duplicate var/namespace-import binding — pre-link crash

Status: Open.

#5292 In jerryscript-project/jerryscript;

· h0rk1p opened on Jun 20, 2026