-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.1 | 1.8.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper type handling during JIT optimization. The commit diff shows:
This indicates the original code:
This mismatch between expected and actual type information could lead to incorrect memory access patterns (CWE-787) when the JIT engine generates code based on the corrupted type assumptions. The patch specifically addresses this by adding cleanup logic, confirming this was the vulnerable path.