~ / search / GHSA-jgrp-6qqq-3284

GHSA-jgrp-6qqq-3284

Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption

Source: GitHub Advisory Database (reviewed) High CVE-2021-42279

Packages

EcosystemPackageAffectedFixed in
NuGet Microsoft.ChakraCore <= 1.11.24 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Chakra Scripting Engine and ChakraCore are vulnerable to memory corruption due to an out-of-bounds write. The Microsoft advisory for CVE-2021-42279 was modified in August 2022 to include Microsoft.ChakraCore as an affected product.

References

External links from the advisory. They lead to third-party sites.