-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper type merging logic in ChakraCore's ValueType system. The patch adds explicit checks for IsArrayOrObjectWithArray() in MergeWithObject, indicating the original code lacked proper array type handling during type merging. This omission could lead to JIT compiler generating incorrect code based on invalid type assumptions, creating opportunities for memory corruption (CWE-787). The direct modification of MergeWithObject in the security patch confirms this function's role in the vulnerability.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.3 | 1.11.3 |
A Semantic Attack on Google Gemini - Read the Latest Research