-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.5 | 1.11.5 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from missing type system safeguards for specific JIT opcodes. The patch adds KillObjectHeaderInlinedTypeSyms calls for these opcodes in ProcessFieldKills, indicating they previously allowed dangerous type transitions. Exploit PoCs demonstrate type confusion via these operations, and CWE-787 classification confirms memory corruption occurs through improper write operations enabled by type confusion.