CVE-2018-11598

CVE-2018-11598 is a denial-of-service and potential information disclosure vulnerability affecting Espruino versions prior to 1.99. It stems from a buffer overflow or out-of-bounds read during syntax parsing of specific for loops in jsparse.c, triggered by user-crafted input files. The vulnerability has a CVSS score of 7.1 (High), indicating a local attack vector with low complexity, requiring user interaction, and leading to high confidentiality and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.