-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.3 | 1.8.3 |
Miggo AIRoot Cause AnalysisThe commit patching CVE-2018-0994 adds two critical fixes: (1) a check in Shrink to copy inlined head segments on 32-bit systems, and (2) invalidation of stale segment references in ReallocateNonLeafLastSegmentIfLeaf. Both omissions in the original code allowed use-after-free conditions. The CWE-787 (out-of-bounds write) aligns with memory corruption caused by improper handling of freed segments. The high confidence stems from direct correlation between the patch and the vulnerability description (use-after-free in memory handling).