-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe patch adds a guard in GlobOpt::OptInstr to prevent TryReplaceLdLen from being executed during the loop prepass. The commit message explicitly states this fixes a use-after-free of LdFld instructions in prePassInstrMap. The vulnerability arises because the original code path allowed TryReplaceLdLen to run in an unsafe context (loop prepass), where instruction modifications could leave dangling references. The root cause is the unconditional call to TryReplaceLdLen in OptInstr, not the TryReplaceLdLen function itself.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.2 | 1.8.2 |