-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from improper type handling in ChakraCore's array operations. The patch replaced unsafe comparisons (InsertCompareBranch) with type-aware InsertMissingItemCompareBranch and introduced GetMissingItemOpndForAssignment/Compare to handle Float64 via uint64/uint32 bitwise checks. The BackwardPass.cpp change fixed a logic error in native array validation. These changes directly address type confusion scenarios where incorrect data types were used for memory operations, leading to exploitable memory corruption.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.10.2 | 1.10.2 |