Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:26742
HistorySep 14, 2020 - 4:26 a.m.

Remote Code Execution (RCE)

2020-09-1404:26:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

0.005 Low

EPSS

Percentile

76.0%

chakracore is vulnerable to remote code execution. The vulnerability exists due to a memory error when StackScriptFunction::BoxState::Box(), in lib/Runtime/Library/StackScriptFunction.cpp, is called.