CVE-2023-36201 Information disclosure in n/a

What is CVE-2023-36201?

CVE-2023-36201 is a high-severity vulnerability in Jerryscript Jerryscript, published on 7 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays.

Weakness: CWE-125

Which versions are affected by CVE-2023-36201?

It affects 1 product.

Products include Jerryscript Jerryscript.

How do I fix CVE-2023-36201?

No fix has been published for CVE-2023-36201 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-36201 being exploited?

There is no known exploitation of CVE-2023-36201 in the wild and no public exploit code.

Other vulnerabilities in Jerryscript Jerryscript

• CVE-2023-36109 Memory corruption in n/a Critical 9.8
• CVE-2023-38961 Memory corruption in n/a Critical 9.8
• CVE-2020-22597 Memory corruption in n/a Critical 9.8
• CVE-2021-42863 Memory corruption in n/a Critical 9.8
• CVE-2021-43453 Memory corruption in n/a Critical 9.8

All Jerryscript Jerryscript vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-49w5-c2q7-xqvq, UBUNTU-CVE-2023-36201.