| 제목 | Duktape https://github.com/svaarala/duktape <=2.99.99 Memory Corruption |
|---|
| 설명 | Duktape's bytecode loader (`duk_api_bytecode.c`) uses the `DUK_ASSERT` macro for bounds checking. In Release builds, `DUK_ASSERT` is defined as a no-op, so the bounds check is completely removed. By crafting bytecode with an inflated `count_instr` field and a truncated buffer ending at the instruction data boundary, the loader reads 4 bytes past the heap allocation, which are then interpreted as bytecode instructions. |
|---|
| 원천 | ⚠️ https://github.com/hmKunlun/compileOOB/blob/main/api_bytecode.md |
|---|
| 사용자 | kunlun (UID 95866) |
|---|
| 제출 | 2026. 05. 20. AM 06:20 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 06. 14. PM 03:43 (25 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 370859 [svaarala duktape 까지 2.99.99 duk_api_bytecode.c count_instr 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|