Skip to content

Jerryscript · weakness class

Denial of Service

48 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 48 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key query for a Proxy object returns unintended data.CVE-2020-13622Jerryscript · 1.3% likely

    CWE-617

  2. Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt() function.CVE-2021-41752Jerryscript · 1.2% likely

    CWE-674

  3. JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, which causes a memory le…CVE-2021-41959Jerryscript · 1.2% likely

    CWE-401

  4. JerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy operation.CVE-2020-13623Jerryscript · 1.2% likely

    CWE-400

  5. There is an Assertion 'block_found' failed at js-parser-statm.c:2003 parser_parse_try_statement_end in JerryScript 2.2.0.CVE-2020-23314Jerryscript · 1.1% likely

    CWE-617

  6. There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statement in JerryScript 2.2.0.CVE-2020-23310Jerryscript · 1.1% likely

    CWE-617

  7. Jerryscript v3.0.0 and below was discovered to contain a stack overflow via ecma_find_named_property in ecma-helpers.c.CVE-2021-44988Jerryscript · 1.1% likely

    CWE-770

  8. There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' in parser_parse_object_initi…CVE-2020-23322Jerryscript · 1.1% likely

    CWE-617

  9. There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in parser_parse_function_arguments in JerryScript 2.2.0.CVE-2020-23320Jerryscript · 1.1% likely

    CWE-617

  10. There is an Assertion in '(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE - (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth' in p…CVE-2020-23319Jerryscript · 1.1% likely

    CWE-617

  11. There is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510 in scanner_literal_is_created in JerryScript 2.2.0CVE-2020-23313Jerryscript · 1.1% likely

    CWE-617

  12. There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_source in JerryScript 2.2.0.CVE-2020-23312Jerryscript · 1.1% likely

    CWE-617

  13. There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230…CVE-2020-23311Jerryscript · 1.1% likely

    CWE-617

  14. There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript 2.2.0.CVE-2020-23309Jerryscript · 1.1% likely

    CWE-617

  15. There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0.CVE-2020-23308Jerryscript · 1.1% likely

    CWE-617

  16. There is an Assertion ''JERRY_CONTEXT (jmem_heap_allocated_size) == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerryscript 3.0.0.CVE-2021-44994Jerryscript · 1.0% likely

    CWE-617

  17. There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerr…CVE-2022-22890Jerryscript · 0.8% likely

    CWE-617

  18. There is an Assertion ''ecma_is_value_boolean (base_value)'' failed at /jerry-core/ecma/operations/ecma-get-put-value.c in Jerryscript 3.0.0.CVE-2021-44993Jerryscript · 0.8% likely

    CWE-617

  19. Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start at jerry-core/parser/js/js-parser-statm.c.CVE-2023-34868Jerryscript · CVSS 7.5 · 0.7% likely

    CWE-617

  20. Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at jerry-core/ecma/base/ecma-property-hashmap.c.CVE-2023-34867Jerryscript · CVSS 7.5 · 0.7% likely

    CWE-617

  21. There is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c(ecma_get_lex_env_type) in JerryScript 3.0.0.CVE-2021-46338Jerryscript · 0.7% likely

    CWE-617

  22. There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at parser_parse_function_arguments in /js/js-parser.c of JerryScript commit a6ab5e9.CVE-2022-22901Jerryscript · 0.7% likely

    CWE-617

  23. There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_p…CVE-2021-46351Jerryscript · 0.7% likely

    CWE-617

  24. There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_p…CVE-2021-46346Jerryscript · 0.7% likely

    CWE-617

  25. There is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0.CVE-2021-46337Jerryscript · 0.7% likely

    CWE-617

  26. There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_class_body) in JerryScript 3.0.0.CVE-2021-46336Jerryscript · 0.7% likely

    CWE-617

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.