Posted by Ron E on Aug 26Escargot contains a remotely triggerable one-byte stack-based out-of-bounds write in the WebSocket message handling logic used by the debugger. When Escargot::DebuggerTcp::receive() receives a binary WebSocket payload that completely fills the caller-provided stack buffer, the function successfully copies the payload into the available buffer space but subsequently appends an additional NUL byte without verifying that space remains for the...