CVE-2023-37139

MediumCVSS 5.5

Published: 18/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

51th percentile - higher than 51% of all known CVEs

A stack overflow vulnerability was discovered in the ChakraCore master branch cbb9b via the function Js::ScopeSlots::IsDebuggerScopeSlotArray().

This vulnerability may lead to unauthorized memory access, posing a risk of arbitrary code execution.

It is recommended to update to the latest version of ChakraCore to mitigate this vulnerability.

Original NVD description (English source)

ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray().