-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.1 | 1.8.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of InitProto instructions in ChakraCore's JIT optimizer. The GitHub patch adds a new case for Js::OpCode::InitProto in CheckJsArrayKills to validate() array types when setting prototypes. Prior to this fix, the absence of InitProto handling allowed native arrays to retain their type assumptions even after prototype changes, leading to type confusion (CWE-787). The exploit POC demonstrates this by manipulating array prototypes to trigger memory corruption, and the commit diff explicitly addresses this function as the fix location for CVE-2018-0834.