Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflow during syntax parsing. This was addressed by fixing stack size detection on Linux in jsutils.c.
- https://github.com/espruino/Espruino/issues/1427
No PoCs found on GitHub currently.