-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.2.2 | 1.2.2 |
Miggo AIRoot Cause AnalysisThe commit diff and vulnerability descriptions explicitly show fixes for type confusion and heap overflow issues in these functions. Changes involved adding checks for native array types, ensuring proper conversions, and validating call flags. The CWE-787/CWE-119 mappings and exploit PoCs confirm these functions were vulnerable due to improper memory handling.