CVE-2021-41751: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

April 5, 2022 (updated April 14, 2022)

Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecma_builtin_array_prototype_object_slice in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021.

References

github.com/jerryscript-project/jerryscript/pull/4797
nvd.nist.gov/vuln/detail/CVE-2021-41751

Code Behaviors & Features

Detect and mitigate CVE-2021-41751 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →