CVE-2023-37140

MediumCVSS 5.5

Published: 18/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.76%

50th percentile - higher than 50% of all known CVEs

A segmentation violation was discovered in the ChakraCore master branch cbb9b via the function Js::DiagScopeVariablesWalker::GetChildrenCount().

The segmentation violation may lead to unexpected application behavior, posing a risk to system stability.

It is recommended to update to the latest version of ChakraCore to mitigate this vulnerability.

Original NVD description (English source)

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount().