| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.6.1 | 1.6.1 |
The analysis focused on: 1) The commit message specifically calls out improper handling of deferred function stubs in formal arguments (CVE-2017-8658), fixed in Parse.cpp. 2) Security.cpp changes show critical fixes to constant blinding mentioned in the vulnerability description. 3) ObjTypeSpecFldInfo.cpp modifications add bounds checks to prevent memory corruption vectors. These functions directly match the vulnerability patterns described in the CVE and commit details.