-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.4 | 1.11.4 |
Miggo AIRoot Cause AnalysisThe commit 8264b9b addressing CVE-2018-8624 added overflow bailout checks when restoring induction variables. The vulnerability stemmed from missing overflow checks in loop memory operation handling, which could corrupt memory via JIT-compiled code. The affected code path in BackwardPass.cpp directly manipulated induction variables during memory operations without proper overflow safeguards prior to the patch, matching the CWE-787 (Out-of-bounds Write) description.