← Database

CVE-2021-43453

CRITICAL CVSS: 9.8 Published: 2022-04-07 Modified: 2026-06-17

Description

A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start in the js-parser-statm.c file. This issue is similar to CVE-2020-29657.

Affected Platforms

Jerryscript Jerryscript

Weakness Type

CWE-125

References