CVE-2021-46170: Use After Free

January 14, 2022 (updated January 21, 2022)

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file.

References

github.com/jerryscript-project/jerryscript/issues/4917
nvd.nist.gov/vuln/detail/CVE-2021-46170

Code Behaviors & Features

Detect and mitigate CVE-2021-46170 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →