Stack Overflow Vulnerability in ChakraCore by Microsoft

CVE-2023-37139

Summary

A stack overflow vulnerability exists in the ChakraCore master branch, specifically within the Js::ScopeSlots::IsDebuggerScopeSlotArray() function. This flaw can potentially allow an attacker to exploit the application, leading to unforeseen consequences such as application crashes or arbitrary code execution. It is critical for users and developers utilizing ChakraCore to assess their deployment and apply required mitigations to fortify the software against potential exploitation.

References