CVE-2017-14749

PoC —

CVSS 3.0

7.8 high

EPSS

2%p80

Published

Sep 26, 2017 (Sep 26, 2017)

Modified

Jun 17, 2026

Description

JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data.

Vendors: jerryscript
Products: jerryscript
Weakness: CWE-119
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.