Posted by Ron E on Aug 26 Escargot contains a remotely triggerable one-byte stack-based out-of-bounds

write in the WebSocket message handling logic used by the debugger.

When Escargot::DebuggerTcp::receive() receives a binary WebSocket payload

that completely fills the caller-provided stack buffer, the function

successfully copies the payload into the available buffer space but

subsequently appends an additional NUL byte without verifying that space

remains for the...