CVE-2023-38961

CriticalCVSS 9.8

Published: 21/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.20%

64th percentile - higher than 64% of all known CVEs

Summary

Buffer Overflow vulnerability in JerryScript Project version 3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to upgrade to the latest version of JerryScript to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.