Miggo Logo
Miggo Vulnerability Database
→
CVE-2019-1103

CVE-2019-1103: Out-of-bounds write

7.5

CVSS Score
3.0

Basic Information

CVE ID
CVE-2019-1103
GHSA ID
GHSA-vmf5-924f-25f2
EPSS Score
0.88665%
CWE
CWE-787
Published
3/29/2021
Updated
2/1/2023
KEV Status
No
Technology
TechnologyC#

Technical Details

CVSS Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
Microsoft.ChakraCorenuget< 1.11.111.11.11

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The patches in commits 75162b7 and efab310 modify bailout handling (BackwardPass.cpp), array value merging (GlobOptBlockData.cpp), and type layout checks (Opnd.cpp). These changes explicitly address scenarios where improper JIT optimizations could cause out-of-bounds writes due to missing type validation, incorrect loop back edge handling, and object layout assumptions. The functions directly modified in these patches are the root causes of the vulnerability.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

* r*mot* *o** *x**ution vuln*r**ility *xists in t** w*y t**t t** ***kr* s*riptin* *n*in* **n*l*s o*j**ts in m*mory in Mi*roso*t ****, *k* '***kr* S*riptin* *n*in* M*mory *orruption Vuln*r**ility'. T*is *V* I* is uniqu* *rom *V*-****-****, *V*-****-**

Reasoning

T** p*t***s in *ommits ******* *n* ******* mo*i*y **ilout **n*lin* (`***kw*r*P*ss.*pp`), *rr*y v*lu* m*r*in* (`*lo*Opt*lo*k**t*.*pp`), *n* typ* l*yout ****ks (`Opn*.*pp`). T**s* ***n**s *xpli*itly ***r*ss s**n*rios w**r* improp*r JIT optimiz*tions *o