-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper type conversions of CallInfo.Count. The commit changes ArgSlot (16-bit) to uint (32-bit) in CallInfo's constructor and adds USHORT_MAX checks in JavascriptExternalFunction.cpp. These changes directly address silent truncation issues that could cause memory corruption via out-of-bounds writes when handling large argument counts in spread operations or external function calls. The affected functions are clearly identified in the patch diff and correlate with the CWE-787 description.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.2 | 1.8.2 |