-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.16 | 1.11.16 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from improper handling of super calls' memory management. The commit 2e33d82 shows critical changes to: 1) Skip emitting super call targets in EmitReference (ByteCodeEmitter.cpp), addressing tmp register misuse. 2) Add super call checks in ReleaseReference (FuncInfo.cpp) to prevent unsafe resource release. These changes directly map to the CWE-787 (out-of-bounds write) and CWE-119 (buffer errors) descriptions, confirming these functions were vulnerable due to uninitialized memory and register management flaws in super call handling.