-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from how SetPropertyWithDescriptor handled DictionaryPropertyDescriptor pointers. The commit patched this by: 1) Changing the parameter to a double-pointer (pdescriptor), 2) Adding TryGetReference to validate() descriptor existence, and 3) Adding null checks after potential descriptor invalidation. These changes directly address a UAF pattern where the original code could operate on a freed descriptor pointer after concurrent property map modifications, enabling memory corruption exploitable for RCE.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.3 | 1.8.3 |