-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.2 | 1.8.2 |
The patch adds 1) A fail-fast assertion for missing items in HeadSegmentIndexOfHelper, and 2) Resets the missing value state in sort exception handling. This indicates two vulnerable areas: the indexOf helper that processes array segments without proper validation, and the sort implementation that failed to maintain array state consistency after exceptions. Both directly relate to the CWE-787 (out-of-bounds write) through memory corruption caused by inconsistent array state management.