-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from multiple TypedArray built-in methods (map, filter, from, subarray) using NewScObject to create instances without: 1) Validating the constructor has [[TypedArrayName]] slot, 2) Checking for detached buffers, 3) Ensuring created arrays meet length requirements. The patch replaced NewScObject with TypedArrayCreate which adds these critical checks. The original implementations allowed user-controlled constructors via @@species to create malformed TypedArrays leading to memory corruption through invalid buffer operations.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.2.0.0 | 1.2.0.0 |