-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability was patched in commit 8a2c373 by changing a function call from GetIsAsmJsFunction() to GetIsAsmjsMode() in the InterpreterStackFrame constructor. This specific check determines whether to mark the frame as hidden (critical for Asm.js memory safety). An incorrect check could lead to memory layout miscalculations, enabling out-of-bounds writes - directly matching the CWE-787 description. The direct correlation between the patch and memory safety mechanism confirms this function's role in the vulnerability.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.1 | 1.8.1 |