What’s Vulnerable › Vulnerabilities

CVE-2019-1010177

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-24 · updated 2026-06-17
• Weakness: CWE-416

Description

Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function Jsi_RegExpNew (jsi/jsiRegexp.c:39). The attack vector is: executing crafted javascript code. The fixed version is: after commit 48a66c798d.

Affected products

• Jsish Jsi: 2.4.70_2.047

References

• https://jsish.org/fossil/jsi/tktview?name=65c8965977
• https://jsish.org/fossil/jsi/tktview?name=65c8965977

Get alerted when CVE-2019-1010177 or the next vulnerability affects your stack