Espruino

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 22
    Known Exploited: 0
    2
    Critical Level Threats
    12
    High Level Threats
    8
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-88389

    Espruino 2v29 (commit bffc6d0) contains a NULL pointer dereference vulnerability in jslGetRawString() in src/jslex.c. Crafted raw/binary string input can cause the lexer to pass a NULL iterator target to jsvLockAgain(). In RELEASE/NO_ASSERT builds, the missing assertion guard allows a write through the NULL pointer, resulting in memory corruption and application termination or denial of service.

    Last Modified: Sep 29, 2026
    Published: Sep 25, 2026

    CVE-2026-88390

    Out-of-Bounds Write in Espruino jslGetTokenValueAsString() Leading to Memory Corruption

    Last Modified: Sep 26, 2026
    Published: Sep 24, 2026

    CVE-2026-88388

    Stack-Based Buffer Overflow in Espruino JavaScript Error Handling

    Last Modified: Sep 26, 2026
    Published: Sep 24, 2026

    CVE-2024-25201

    Espruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c.

    Last Modified: Jun 17, 2025
    Published: Feb 07, 2024

    CVE-2024-25200

    Espruino 2v20 (commit fcc9ba4) was discovered to contain a Stack Overflow via the jspeFactorFunctionCall at src/jsparse.c.

    Last Modified: Jun 20, 2025
    Published: Feb 07, 2024
    Items Per Page
    Espruino Vulnerabilities & Security CVEs | CVE-DB