-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.4 | 1.8.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper register restoration during bailout in JIT optimization. The commit diff shows the critical fix involved reordering WrapArgsOutWithCoerse and MoveArgs calls within Inline::InlineBuiltInFunction. This function handles built-in function inlining and argument processing - incorrect ordering would fail to properly coerce/restore arguments before moving them, creating a window for memory corruption via dangling references or miscalculated offsets (CWE-787). The direct correlation between the patch location and the vulnerability description confirms this function's role.