-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
C#C#Miggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of formal parameters in function declarations. The GitHub patch adds a critical check for vardecl->sxVar.sym->GetIsFormal() in ParseFncDecl, ensuring writes to formal parameters are tracked. Without this check, the JIT compiler could optimize arguments under the false assumption that no writes occurred to formals (via the HasAnyWriteToFormals flag), leading to type confusion and write-AV when interacting with null scope objects. The exploit example demonstrates how nested function declarations in blocks could trigger this incorrect optimization, confirming the function's role in the vulnerability.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.7.4 | 1.7.4 |
Ongoing coverage of React2Shell