CyberRota Analysis
AI-GeneratedThe vulnerability affects the Espruino JavaScript interpreter, specifically in the jslGetTokenValueAsString() function, where an out-of-bounds write can occur due to crafted JavaScript input. This memory corruption can lead to application crashes or denial of service. Developers and organizations using Espruino 2v29 should prioritize addressing this issue to maintain application stability and security.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0) allows crafted JavaScript input containing an overlong token to trigger a one-byte write beyond the JsLex.token buffer in RELEASE/NO_ASSERT builds. The out-of-bounds write corrupts the adjacent tokenValue pointer, resulting in memory corruption and potentially causing application crashes or denial of service.