CVE-2021-41752

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt() function.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-674

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Apr 5, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-417537.5A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remoCVE-2021-417549.8dynamicMarkt <= 3.10 is affected by SQL injection in the parent parameter of index.php.CVE-2021-417559.8dynamicMarkt <= 3.10 is affected by SQL injection in the kat1 parameter of index.php.CVE-2021-417569.8dynamicMarkt <= 3.10 is affected by SQL injection in the kat parameter of index.php.CVE-2021-41766.1livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-417648.8A cross-site request forgery (CSRF) vulnerability exists in Streama up to and including v1.10.3. The application does not have CSRF checks iCVE-2021-417659.8A SQL injection issue in pages/edit_fields/9_ajax/add_keyword.php of ResourceSpace 9.5 and 9.6 < rev 18274 allows remote unauthenticated attCVE-2021-417668.1Apache Karaf allows monitoring of applications and the Java runtime by using the Java Management Extensions (JMX). JMX is a Java RMI based tCVE-2021-417676.5Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. ThisCVE-2021-417697.5A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD86 devices (CPU vaCVE-2021-41775.3livehelperchat is vulnerable to Generation of Error Message Containing Sensitive InformationCVE-2021-417707.5Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XML file disclosure.