CVE-2017-18212

CVE-2017-18212 is a critical heap-based buffer over-read vulnerability affecting JerryScript 1.0, specifically within the lit_read_code_unit_from_hex function. This flaw can be triggered by a specially crafted RegExp payload, allowing an unauthenticated attacker to achieve high impact on confidentiality, integrity, and availability. With a CVSS score of 9.8, it represents a severe risk due to its network-based attack vector and low attack complexity. While there is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.