CVE Tools
Track your stack

Jerryscript

71 CVEs tracked since 2020. Since Aug 2020, none of them reached CISA KEV.

Jerryscript CVEs per month

Aug 2020 to Apr 2024. Point at a month, or focus the strip and use the arrow keys.
Jerryscript CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-0820
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06200
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-01270
2022-02null or fewer
2022-03null or fewer
2022-0430
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-0440
2023-05110
2023-06null or fewer
2023-07null or fewer
2023-08null or fewer
2023-09null or fewer
2023-10null or fewer
2023-11null or fewer
2023-12null or fewer
2024-01null or fewer
2024-02null or fewer
2024-03null or fewer
2024-0440

Products

The products that kept showing up in Jerryscript's monthly top three, with their CVEs summed over those months.

  1. Jerryscript717 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Jerryscript.

  1. CVE-2024-33255Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_string_list.6.2
  2. CVE-2024-33260Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c5.1
  3. CVE-2024-33259Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scanner_seek at jerry-core/parser/js/js-scanner-util.c.5.5
  4. CVE-2024-33258Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vm_loop at jerry-core/vm/vm.c.7.1
  5. CVE-2024-29489Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecma_get_object_type.5.5
  6. CVE-2023-36109Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ecma-helpers-string.c.9.8
  7. CVE-2023-38961Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.9.8
  8. CVE-2020-24187An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Pointer Dereference).5.5
  9. CVE-2023-36201An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays.7.5
  10. CVE-2020-22597An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary code via the ecma_builtin_array_prototype_object_slice parameter.9.8
  11. CVE-2023-34867Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at jerry-core/ecma/base/ecma-property-hashmap.c.7.5
  12. CVE-2023-34868Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start at jerry-core/parser/js/js-parser-statm.c.7.5
  13. CVE-2023-31921Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-core/ecma/operations/ecma-big-uint.c.5.5
  14. CVE-2023-31914Jerryscript 3.0 (commit 05dbbd1) was discovered to contain out-of-memory issue in malloc.5.5
  15. CVE-2023-31913Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c.5.5

The record

Peak rank
#32 in Jan 2022
Busiest month shown
Jan 2022, 27 CVEs
Months with a KEV entry
0 since Aug 2020
Monthly snapshots
7 since 2020
Jerryscript's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store