The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Null Pointer Dereference
Denial Of Service
Jerryscript
NVD
GitHub
CVSS 3.1
7.5
EPSS
2.4%
An issue was discovered in Contiki Operating System 3.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Denial Of Service
Memory Corruption
Use After Free
Contiki
NVD
GitHub
CVSS 3.0
7.5
EPSS
0.3%