Approved changes feed: RSS · Atom
cpe:2.3:o:espruino:espruino:*:*:*:*:*:*:*:*part: o version: * update: *
| Vendor | Espruino (41076fb2-0625-5a76-9d84-c07b56b16400) |
|---|---|
| Product | Espruino (d068ad85-3e24-50e0-b50e-c02b00cfdaea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/voxadam/espruino |
purl2cpe | 2026-06-01 10:17:50.724323 |
pkg:github/espruino/espruino |
purl2cpe | 2026-06-01 10:17:50.724325 |
pkg:rpm/opensuse/espruino |
purl2cpe | 2026-06-01 10:17:50.724327 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-22884 |
vulnerable | 2026-06-08 05:22:31.690673 |
Details available
Buffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE_2V09, allows remote attackers to execute arbitrary code.
Published: 2021-07-13T14:44:09.000Z
Updated: 2024-08-04T14:51:10.879Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11598 |
vulnerable | 2026-06-08 05:10:38.705574 |
Details available
Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user crafted input files via a Buffer Overflow or Out-of-bounds Read during syntax parsing of certain for loops in jsparse.c.
Published: 2018-05-31T16:00:00.000Z
Updated: 2024-09-16T17:39:06.848Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11597 |
vulnerable | 2026-06-08 05:10:38.705066 |
Details available
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because of a missing check for stack exhaustion with many '{' characters in jsparse.c.
Published: 2018-05-31T16:00:00.000Z
Updated: 2024-09-16T23:20:22.924Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11596 |
vulnerable | 2026-06-08 05:10:38.704687 |
Details available
Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsing because a check for '\0' is made for the wrong array element in jsvar.c.
Published: 2018-05-31T16:00:00.000Z
Updated: 2024-09-17T00:56:13.699Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11595 |
vulnerable | 2026-06-08 05:10:38.704273 |
Details available
Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Escalation of Privileges with a user crafted input file via a Buffer Overflow during syntax parsing, because strncat is misused.
Published: 2018-05-31T16:00:00.000Z
Updated: 2024-09-17T02:06:51.650Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11594 |
vulnerable | 2026-06-08 05:10:38.703860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11593 |
vulnerable | 2026-06-08 05:10:38.703490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11592 |
vulnerable | 2026-06-08 05:10:38.703011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11591 |
vulnerable | 2026-06-08 05:10:38.702651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11590 |
vulnerable | 2026-06-08 05:10:38.702198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.