CVE-2023-34868
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jun 14, 2023
Updated: Jun 23, 2023
CWE ID 617
Summary
CVE-2023-34868 is a newly discovered vulnerability affecting Jerryscript 3.0, specifically commit 05dbbd1. This issue involves an assertion failure in the parser_parse_for_statement_start function located in jerry-core/parser/js/js-parser-statm.c. Successful exploitation could allow an attacker to execute arbitrary code, posing a significant security risk to systems utilizing Jerryscript 3.0 with this vulnerable commit. Users are advised to apply patches or upgrades as soon as possible to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share