{"id":"CVE-2026-88390","revision":"86fb343e49a24ef09ee2c3c6c9536c0b","records":[{"revision":"86fb343e49a24ef09ee2c3c6c9536c0b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-88390","aliases":[],"title":"An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0) allows crafted JavaScript input containing an overlong token to trigger a one-byte write beyond the JsLex.token buffer in RELEASE/NO_ASSERT…","description":"An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0) allows crafted JavaScript input containing an overlong token to trigger a one-byte write beyond the JsLex.token buffer in RELEASE/NO_ASSERT builds. The out-of-bounds write corrupts the adjacent tokenValue pointer, resulting in memory corruption and potentially causing application crashes or denial of service.","state":0,"publishedAt":"2026-09-24T00:00:00+00:00","modifiedAt":"2026-09-24T18:59:33.57+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://github.com/espruino/Espruino/issues/2744","https://github.com/espruino/Espruino/commit/ecd7d43e084ba9aafa8245609347fe0f4383b38c"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-88390","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-88390","identifiers":["CVE-2026-88390"]},"retained":false,"historicalAffected":[]}],"coverage":[]}