-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.8.5 | 1.8.5 |
Miggo AIRoot Cause AnalysisThe analysis infers vulnerable functions based on the CWE-787 (OOB Write) description and ChakraCore's architecture. Common vectors for memory corruption in JS engines include array operations and typed array handling. While no explicit patch details are provided, functions like DirectSetItemAt (array element assignment) and DataView::SetValue (binary data handling) are prime candidates for missing bounds checks. Confidence remains low due to lack of direct commit evidence, but these represent plausible targets based on vulnerability type and engine mechanics.