Code

ChakraCore 2018-04 security updates#4963

Code

Merged

chakrabot merged 8 commits intochakra-core:release/1.8chakra-core/ChakraCore:release/1.8from rajatd:servicing/1804rajatd/ChakraCore:servicing/1804Copy head branch name to clipboardApr 10, 2018

+481-251

Commits

Commits on Apr 10, 2018

• [CVE-2018-0980] Chakra JIT - A bound check elimination bug - Google, Inc.

  

  MikeHolman

  authored and

  rajatd

  committed
  af07d28

  Copy full SHA for af07d28

• [CVE-2018-1019] Use after free of JavascriptExceptionObject - Individual

  

  Meghana Gupta

  authored and

  rajatd

  committed
  14a2773

  Copy full SHA for 14a2773

• [CVE-2018-0995] Edge - JavascriptNativeIntArray::ConvertToVarArray could lead to UAF - Individual

  

  Jianchun Xu

  authored and

  rajatd

  committed
  396d78f

  Copy full SHA for 396d78f

• [CVE-2018-0993] Edge - Stack-to-heap copy bug in Edge,expose internal property - Qihoo 360

  

  Thomas Moore (CHAKRA)

  authored and

  rajatd

  committed
  4bdd0ef

  Copy full SHA for 4bdd0ef

• [CVE-2018-0979] Incorrect byte code can cause dereference of uninitialized stack location - Internal

  

  pleath

  authored and

  rajatd

  committed
  2637140

  Copy full SHA for 2637140

• [CVE-2018-0990] Edge - UAF leads to potential RCE in latest version - Qihoo 360

  

  mcgov

  authored and

  rajatd

  committed
  91dc6f8

  Copy full SHA for 91dc6f8

• [CVE-2018-0994] Edge - Submit a use after free bug to Edge - 360Vulcan

  

  akroshg

  authored and

  rajatd

  committed
  0578ca5

  Copy full SHA for 0578ca5

• Updating ChakraCore version

  rajatd

  committed
  e8a1e29

  Copy full SHA for e8a1e29