ZeroHour

CVE-2018-11590

PoC
CVSS 3.0
5.5 medium
EPSS
1%p61
Published
()
Modified
Description

Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflow during syntax parsing. This was addressed by fixing stack size detection on Linux in jsutils.c.

Vendors
espruino
Products
espruino
Weakness
CWE-190
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.