The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Denial Of Service
Null Pointer Dereference
Jerryscript
NVD
GitHub
CVSS 3.1
7.5
EPSS
2.4%
An issue was discovered in Contiki Operating System 3.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Denial Of Service
Use After Free
Memory Corruption
Contiki
Contiki Os
NVD
GitHub
CVSS 3.0
7.5
EPSS
0.3%