-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.2 | 1.8.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from an incomplete fix in BoxStackInstance's memory handling logic. The commit diff shows the critical modification adding '|| deepCopy' to the conditional, indicating the original code failed to reallocate array segments when deepCopy was required. This matches the CWE-787 (out-of-bounds write) pattern, as improper memory reallocation could lead to corrupted heap structures. The exploit POC demonstrates manipulation of array segment allocation to trigger this vulnerability.
A Semantic Attack on Google Gemini - Read the Latest Research