-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper memory handling in array initialization routines. The commit fixes show critical corrections in size calculations (switching from JavascriptArray::MissingItem-based sizing to double/type-specific sizing) and missing item initialization patterns. These functions directly manipulated array segment memory layouts, and the pre-patch miscalculations would cause out-of-bounds writes (CWE-787) when initializing native float/double arrays. The high confidence comes from the direct correlation between the patched code paths and the CWE-787 description in the advisory.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.3 | 1.11.3 |