CVE-2025-65570

๐Ÿšจ CRITICAL

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT opcode. When an โ€œinstanceofโ€ expression uses an array element access as the left-hand operand inside a for-i...

Published
Dec 29, 2025
Last Modified
Dec 31, 2025
Views
4
Bookmarks
0

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT opcode. When an โ€œinstanceofโ€ expression uses an array element access as the left-hand operand inside a for-in loop, the instructions implementation leaves an additional array reference on the stack rather than consuming it during OP_INSTANCEOF. As a result, OP_NEXT interprets the array as an iterator object and reads the iterCmd function pointer from an invalid structure, potentially causing a crash or enabling code execution depending on heap layout.

Affected Products (1)

jsish - jsish

Version: 2.0

CVSS Scores

CVSS 3.1 9.8
9.8
CRITICAL
CVSS 2.0 9.8

Additional Information

Source
cve@mitre.org
State
Analyzed

Share CVE-2025-65570

Share on Social Media

Copy Link

Embed Code

Request Expert Analysis

Request a professional security analysis for CVE-2025-65570 from our verified experts.

Credits System

Use your credits to get expert analysis from verified security professionals. Purchase more credits anytime!

Add 3 credits for accelerated delivery

Base Cost: 8 credits
Priority Upgrade: + credits
SLA Acceleration: +3 credits
Total Cost:
Your Balance:

Insufficient Credits

You need more credits to submit this request.

Buy Credits

Report Analysis