-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper stack handling in JIT compilation. The patches add 'IsArgSaveRequired' checks to both ARM and ARM64 backend code generators. These checks ensure proper stack unwind information and call flag settings when arguments need to be saved. Without these checks, the compiler would miscalculate stack layouts, leading to memory corruption via invalid stack reads/writes. The direct modification of these stack management functions in the security patch confirms their role in the vulnerability.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.1 | 1.11.1 |