CVE-2023-36109 PoC — JerryScript 安全漏洞

Source

https://github.com/Limesss/CVE-2023-36109

Associated Vulnerability

Title: JerryScript 安全漏洞 (CVE-2023-36109)
Description:Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ecma-helpers-string.c.

Description

a poc for cve-2023-36109

Readme

# CVE-2023-36109
a poc for cve-2023-36109 
## request repo
```
git clone https://github.com/jerryscript-project/jerryscript.git
cd jerryscript
```

## build 
```
python ./tools/build.py --clean --debug --compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer --compile-flag=-fno-common --compile-flag=-fsanitize=address --compile-flag=-g --strip=off --lto=off --error-messages=on --system-allocator=on --logging=on --line-info=on --stack-limit=20
```

## main reson 

buffer overflow at ecma_stringbuilder_append_raw in jerry-core/ecma/base/ecma-helpers-string.c:2609

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →