-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.2.1 | 1.2.1 |
Miggo AIRoot Cause AnalysisThe commit patches two distinct vulnerabilities. For CVE-2016-3350 (CustomHeap): The FreeAllocation function lacked checks for invalid indices and page states, enabling memory corruption via malformed bit vector operations. For CVE-2016-3377 (Array.map): DirectSetItemAt bypassed type safety, allowing type confusion when user-controlled @@species constructors returned incompatible array types. Both functions are directly modified in the patch, and their vulnerabilities align with the CWE-119 memory corruption description.
A Semantic Attack on Google Gemini - Read the Latest Research