-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.7.3 | 1.7.3 |
The vulnerability stemmed from improper handling of argument emission sequences when array destructuring introduced try/catch/finally blocks. The patch replaced direct ArgOut emission with temporary storage (via EmitArgsWithArgOutsAtEnd) and modified EmitArgs/EmitSpreadArgToListBytecodeInstr. The original functions lacked safeguards for intermediate exception handling, making them susceptible to memory corruption during bailout scenarios.
A Semantic Attack on Google Gemini - Read the Latest Research