-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the original code's insufficient check in ObjTypeSpecFldInfo::CreateFrom when processing polymorphic inline caches. The pre-patch code only checked inlineCache.IsProto() && !inlineCache.u.proto.isMissing before using proto type information, but didn't account for the case where isMissing=true. This could lead to type confusion when handling missing properties. The patch adds an explicit check for isMissing in the proto case and disables equivalence checks when missing, confirming this as the vulnerable code path.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.7.5 | 1.7.5 |