A NULL pointer dereference vulnerability has been identified in the JavaScript library microlight version 0.0.7, a lightweight syntax highlighting library. When processing elements with non-standard CSS color values, the library fails to validate the result of a regular expression match before accessing its properties, leading to an uncaught TypeError and potential application crash. NOTE: this is disputed by multiple parties because there is no common scenario in which an adversary can insert those non-standard values.
CVSS
No CVSS.
References
Configurations
No configuration.
History
20 Jun 2025, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A NULL pointer dereference vulnerability has been identified in the JavaScript library microlight version 0.0.7, a lightweight syntax highlighting library. When processing elements with non-standard CSS color values, the library fails to validate the result of a regular expression match before accessing its properties, leading to an uncaught TypeError and potential application crash. NOTE: this is disputed by multiple parties because there is no common scenario in which an adversary can insert those non-standard values. | |
| CWE | CWE-476 | |
| References |
|
17 Jun 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-17 20:15
Updated : 2025-06-20 12:15
NVD link : CVE-2025-45525
Mitre link : CVE-2025-45525
JSON object : View
Products Affected
No product.
CWE
CWE-476
NULL Pointer Dereference