Repository Issue Activity (beta)

#5298 Unusual Multithreading API

#5304 lexer_construct_number_object casts oversized numeric literal to int32 -> UBSan float-cast-overflow (SIGILL) (CWE-681)

#5303 ecma_make_number_value casts out-of-range double to integer -> UBSan float-cast-overflow (SIGILL) (CWE-681)

#5302 Malformed snapshot bytecode drives VM-init stack-buffer-overflow (vm_init_exec, vm.c:5190) (CWE-125)

#5301 Snapshot deserialization lacks bounds checks on untrusted offset/length fields -> out-of-bounds read (SEGV / ASan use-after-poison / DoS) (CWE-125)

#5300 Ungraceful handling of stack overflow

#5297 JerryScript: Proxy getOwnPropertyDescriptor invariant check misses descriptor defaults

#5296 JerryScript: Proxy deleteProperty invariant checks can raise two exceptions and abort debug builds

#5295 JerryScript: malformed snapshot literal offset causes out-of-bounds read in ecma_snapshot_get_literal

#5294 JerryScript: configurable module namespace re-export causes type confusion and crash

#5293 jerryscript jerry-snapshot tool: unbounded literals-list parser → global-buffer-overflow (OOB write) in process_generate

#5292 jerryscript: NULL-pointer dereference in ES-module linker (ecma_module_resolve_import) via duplicate var/namespace-import binding — pre-link crash

#5291 Private security contact for multiple snapshot loader memory corruption issues

#5290 Segmentation fault on self-referential array raised to power of zero

#5289 Simple non fixed size jerry_string_to_buffer alternative?

#5035 using jerry_promise() and jerry_run_jobs() call(s)

#5275 Enable GitHub Discussions

#5287 Heap reference count exhaustion

#5286 Infinite recurssion in regex handling

#5285 Infinite recursion resutls in stack overflow

#5284 Question about to execute SQL in jerry

#5263 CI failure

#5283 Heap OOB Write in Array.prototype.fill via start.valueOf() array shrink

#5282 Heap OOB Read in Array.prototype.copyWithin via TOCTOU

#5281 Type confusion in Array.prototype.slice via Array[Symbol.species] TOCTOU