-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.4 | 1.11.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of compensation maps during loop optimization. The commit 69a259c shows critical changes in how SymToValueInfoMap is passed (reference→pointer) and stored in the loop structure. These changes directly address a lifetime management issue that could cause memory corruption via invalid map access. The functions involved in map handling (InsertValueCompensation and MergePredBlocksValueMaps) are the root cause, as confirmed by the CWE-787 classification and patch analysis.