-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.4.4 | 1.4.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from improper validation of function pointers when handling promise resolution. The key changes in the patch involve replacing 'JavascriptFunction*' with 'Var' types and adding JavascriptConversion::IsCallable checks before method invocations. The unpatched versions of these functions failed to validate that 'resolve' and 'reject' parameters were actually callable functions, allowing attackers to substitute them with integer values (via prototype pollution) and trigger memory corruption through type confusion. The test case bug11026788.js demonstrates this by overriding 'then' with a numeric value, which would crash without the added callable checks.
C#C#