CVE-2020-29657 Information disclosure in n/a

Critical 9.1 Published 9 Dec 2020 Updated 4 Aug 2024

An out-of-bounds read in JerryScript allows attackers to disclose sensitive memory contents via crafted JavaScript input.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-29657?

CVE-2020-29657 is a critical vulnerability in Jerryscript Jerryscript, published on 9 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the main-utils.c file.

Weakness: CWE-125

Which versions are affected by CVE-2020-29657?

It affects 1 product.

Products include Jerryscript Jerryscript.

How do I fix CVE-2020-29657?

No fix has been published for CVE-2020-29657 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-29657 being exploited?

There is no known exploitation of CVE-2020-29657 in the wild and no public exploit code.

All Jerryscript Jerryscript vulnerabilities

Sources

Also known as GHSA-7q7j-9q5r-4p9v, UBUNTU-CVE-2020-29657.