-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper memory handling in CloneTypeHandler. The pre-patch code passed the original attributes and setters directly to PathTypeHandlerWithAttr::New() without deep copying. The fix introduced Recycler-allocated copies (via memcpy) of these arrays, confirming the vulnerability was caused by reused memory references. This matches the CWE-787 (Out-of-bounds Write) classification, as type confusion could lead to invalid memory access/corruption.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.1 | 1.11.1 |