-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.7.5 | 1.7.5 |
Miggo AIRoot Cause AnalysisThe commit 66b9abb explicitly addresses CVE-2017-11889 by modifying ProcessValueKills in GlobOpt.cpp. The vulnerability stemmed from missing checks for IsOptimizedVirtualTypedArray() when handling value type kills during JIT optimization. This omission allowed unsafe memory access to detached ArrayBuffers. The patch adds the necessary checks to trigger bailouts, confirming this function's role in the vulnerability.
A Semantic Attack on Google Gemini - Read the Latest Research