How many CVEs have a located fix in chakra-core/ChakraCore?

205 published CVEs have a fix traced to functions in chakra-core/ChakraCore, touching 417 functions across 259 files.

Which function in chakra-core/ChakraCore has been patched by the most CVEs?

Optimize in lib/Backend/GlobOptArrays.cpp has been changed by 29 CVE fixes, from 2018 to 2020.

How large is a typical CVE fix in chakra-core/ChakraCore?

The median fix changes 101 lines. 26% of fixes change 20 lines or fewer, and 25% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

cpp

c

#8 of 500 repositories

chakra-core/ChakraCore

Name: chakra-core/ChakraCore: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix December 9, 2020

205

CVE fixes located

Published CVEs

417

Functions patched

Distinct function sites

259

Files patched

Distinct source files

2016–2020

Years covered

By CVE publication date

Overview

205 published CVEs have a fix traced to functions in chakra-core/ChakraCore, the earliest published in 2016. Those fixes changed 417 distinct functions across 259 files, in 8,146 patch hunks.

Among the 500 repositories tracked here, chakra-core/ChakraCore ranks #8 by the number of CVEs with a located fix.

Most patched functions

Functions in chakra-core/ChakraCore changed by the most CVE fixes.

Most patched files

Files in chakra-core/ChakraCore changed by the most CVE fixes.

1lib/Backend/GlobOpt.cpp88 CVEs · 3 functions
2lib/Runtime/Library/JavascriptArray.cpp70 CVEs · 16 functions
3lib/Backend/GlobOptFields.cpp64 CVEs · 2 functions
4lib/Backend/Lower.cpp63 CVEs · 6 functions
5lib/Common/ChakraCoreVersion.h58 CVEs · 0 functions
6lib/Backend/BackwardPass.cpp57 CVEs · 0 functions
7lib/Backend/GlobOpt.h42 CVEs · 5 functions
8lib/Runtime/Language/JavascriptOperators.cpp40 CVEs · 7 functions
9lib/Backend/Inline.cpp35 CVEs · 8 functions
10lib/Runtime/ByteCode/ByteCodeEmitter.cpp34 CVEs · 39 functions

Fix size

How much code a CVE fix in chakra-core/ChakraCore changes, with backports counted once.

101

Median lines changed

Added plus removed, per CVE

26%

Fixes of 20 lines or fewer

Share of CVE fixes

25%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in chakra-core/ChakraCore, and the functions each fix changed.

Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17131
High · CVSS 7.5
EPSS 2.0%2020-12-09
Out-of-bounds Write in ChakraCore
CVE-2020-17054GlobOpt LowerLdFrameDisplay CheckIfInstrInTypeCheckSeqEmitsTypeCheck
High · CVSS 7.5
EPSS 2.1%2020-11-11
Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17048GlobOpt LowerLdFrameDisplay CheckIfInstrInTypeCheckSeqEmitsTypeCheck
High · CVSS 8.1
EPSS 1.6%2020-11-11
Remote code execution in ChakraCore
CVE-2020-1172ForEachInlineeFrameDisplay GetInlineeFrameDisplaysIndex UTF8EncodingPolicyBase
High · CVSS 7.5
EPSS 2.2%2020-09-11
Remote code execution in ChakraCore
CVE-2020-1057ForEachInlineeFrameDisplay GetInlineeFrameDisplaysIndex UTF8EncodingPolicyBase
High · CVSS 8.1
EPSS 2.2%2020-09-11
ChakraCore RCE Vulnerability
CVE-2020-1073PatchPutValueCantChangeType CantChangeType BackwardPass
High · CVSS 8.1
EPSS 8.6%2020-06-09
Scripting Engine Memory Corruption Vulnerability
CVE-2020-1065
High · CVSS 7.5
EPSS 2.2%2020-05-21
Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-1037
High · CVSS 7.5
EPSS 2.2%2020-05-21
ChakraCore RCE Vulnerability
CVE-2020-0969EmitLoadInstance GetThisAndUnwrappedInstance
High · CVSS 7.5
EPSS 13.3%2020-04-15
ChakraCore Remote Code Execution Vulnerability
CVE-2020-0970EmitLoadInstance GetThisAndUnwrappedInstance
High · CVSS 7.5
EPSS 13.3%2020-04-15
ChakraCore RCE Vulnerability
CVE-2020-0812IntlCache InsertMoveForPolymorphicCacheIndex Optimize
High · CVSS 7.5
EPSS 7.9%2020-03-12
ChakraCore information disclosure vulnerability
CVE-2020-0813IntlCache InsertMoveForPolymorphicCacheIndex Optimize
High · CVSS 7.5
EPSS 5.5%2020-03-12

Get an alert for each new chakra-core/ChakraCore CVE, with the patched functions and AI-written analysis.

Monitor ChakraCore CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

apache/airflow200 CVEs gpac/gpac194 CVEs vim/vim222 CVEs zephyrproject-rtos/zephyr186 CVEs jenkinsci/jenkins167 CVEs go-gitea/gitea162 CVEs discourse/discourse159 CVEs liferay/liferay-portal159 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in chakra-core/ChakraCore.

How many CVEs have a located fix in chakra-core/ChakraCore?: 205 published CVEs have a fix traced to functions in chakra-core/ChakraCore, touching 417 functions across 259 files.
Which function in chakra-core/ChakraCore has been patched by the most CVEs?: Optimize in lib/Backend/GlobOptArrays.cpp has been changed by 29 CVE fixes, from 2018 to 2020.
How large is a typical CVE fix in chakra-core/ChakraCore?: The median fix changes 101 lines. 26% of fixes change 20 lines or fewer, and 25% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track chakra-core/ChakraCore CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing