-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.2 | 1.11.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the code in PathTypeHandler.cpp where stale accessor properties (setters without getters) were not properly accounted for during type conversion. The patch adds logic to increment nextPropertyIndex to avoid leaving dangling references. Without this fix, the engine could miscalculate property slot indices, creating type confusion between accessor and data properties. This confusion enables memory corruption (CWE-787), which is consistent with the CVE's description of RCE via memory corruption.
A Semantic Attack on Google Gemini - Read the Latest Research