CVE Catalog

CVE-2023-37141

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.76%

50th percentile - higher than 50% of all known CVEs

Summary

A segmentation violation was discovered in the ChakraCore master branch cbb9b via the function Js::ProfilingHelpers::ProfiledNewScArray().

Risk Assessment

The segmentation violation may lead to application crashes or unauthorized memory access, posing risks to system stability and security.

Recommendation

It is recommended to update to the latest version of ChakraCore to mitigate this vulnerability.

Original NVD description (English source)

ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS