CVE-2021-46345: 
Homebrew vulnerability analysis and mitigation

A vulnerability was discovered in JerryScript version 3.0.0 that causes an assertion failure in the lit-strings.c file. The vulnerability was identified with CVE-2021-46345 and was reported on January 4, 2022. The issue specifically occurs in the litconvertcesu8stringtoutf8string function at line 868, where an assertion 'cesu8cursorp == cesu8endp' fails (GitHub Issue).

The vulnerability manifests when processing string operations using String.fromCodePoint and padEnd methods. The issue is triggered by a specific sequence of operations: creating a string using String.fromCodePoint with value 1337, followed by using padEnd method to extend the string. This leads to an assertion failure in the CESU-8 to UTF-8 string conversion process. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (NVD).

The vulnerability results in a denial of service condition through an assertion failure, which causes the application to terminate unexpectedly. The CVSS scoring indicates that while there is no impact on confidentiality or integrity, there is a high impact on availability when successfully exploited (NVD).