Description (CNA)
A vulnerability was determined in berry-lang berry up to 1.1.0. The affected element is the function scan_string of the file src/be_lexer.c. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Patch name: 7149c59a39ba44feca261b12f06089f265fec176. Applying a patch is the recommended action to fix this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| berry-lang / berry | affected 1.0; affected 1.1.0 |
CWE
CWE-125, CWE-119
References
- https://vuldb.com/?id.348014
- https://vuldb.com/?ctiid.348014
- https://vuldb.com/?submit.758872
- https://github.com/berry-lang/berry/issues/509
- https://github.com/berry-lang/berry/pull/511
- https://github.com/oneafter/0211/blob/main/be/repro
- https://github.com/berry-lang/berry/commit/7149c59a39ba44feca261b12f06089f265fec176
- https://github.com/berry-lang/berry/
ADP enrichment
No English description supplied.
No references supplied.