-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.ChakraCore | nuget | < 1.11.17 | 1.11.17 |
The commit bdd48f2 specifically addresses CVE-2020-0812 by adding a prototype equality check in DeferredTypeHandler.cpp. The vulnerability manifests in type handling logic where improper prototype validation could allow attackers to corrupt memory through crafted objects. The patch modifies SetNewScriptFunction to enforce prototype consistency, directly indicating this was the vulnerable code path.