Escargot v4.3.0-214-gfaee4437 Debugger WebSocket Off-by-One Stack Buffer Overflow

Posted by Ron E on Aug 26Escargot contains a remotely triggerable one-byte stack-based out-of-bounds write in the WebSocket message handling logic used by the debugger. When Escargot::DebuggerTcp::receive() receives a binary WebSocket payload that completely fills the caller-provided stack buffer, the function successfully copies the payload into...