Lucene search
+L

256 matches found

Tenable Nessus
Tenable Nessus
•added 2025/10/17 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2025-62496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessive...

8.8CVSS6AI score0.0048EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/10/17 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2025-62493

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digit...

6.5CVSS5.9AI score0.00382EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/16 6:30 p.m.•21 views

EUVD-2025-34781

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

5.9CVSS6AI score0.00382EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/16 6:30 p.m.•23 views

EUVD-2025-34778

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

7.1CVSS6.1AI score0.0048EPSS
SaveExploits1References3
Snyk
Snyk
•added 2025/10/16 4:42 p.m.•10 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the jsbiginttostring1 function. An attacker can access sensitive information from adjacent heap memory by triggering a crafted BigInt conversion that causes the engine to read beyond the allocated buffer...

6.8CVSS5.9AI score0.00382EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2025/10/16 4:15 p.m.•13 views

DEBIAN-CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS6.1AI score0.0048EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/10/16 4:15 p.m.•48 views

CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS5.9AI score
SaveExploits0References2
NVD
NVD
•added 2025/10/16 4:15 p.m.•22 views

CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS0.0048EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2025/10/16 4:15 p.m.•11 views

DEBIAN-CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS6AI score0.00382EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/10/16 4:15 p.m.•11 views

CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS5.9AI score0.00382EPSS
SaveExploits1References2
NVD
NVD
•added 2025/10/16 4:15 p.m.•21 views

CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS0.00382EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2025/10/16 4:15 p.m.•16 views

UBUNTU-CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS6.1AI score0.0048EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2025/10/16 4:15 p.m.•17 views

UBUNTU-CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS6AI score0.00382EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/10/16 3:52 p.m.•30 views

CVE-2025-62496 Integer overflow in js_bigint_from_string in QuickJS

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

7.1CVSS0.0048EPSS
SaveExploits1References2
CVE
CVE
•added 2025/10/16 3:52 p.m.•57 views

CVE-2025-62496

The CVE refers to QuickJS: BigInt parsing in js_bigint_from_string. When converting a decimal string with an extremely large number of digits, the code computes n_bits as (n_digits × 27 + 7) / 8. For very large inputs (e.g., tens of millions of digits), this intermediate value overflows a 32-bit ...

8.8CVSS6.1AI score0.0048EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2025/10/16 3:52 p.m.•21 views

CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS6.1AI score0.0048EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2025/10/16 3:52 p.m.•7 views

CVE-2025-62496 Integer overflow in js_bigint_from_string in QuickJS

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

7.1CVSS6.1AI score0.0048EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2025/10/16 3:52 p.m.•17 views

CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS6.1AI score0.0048EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/10/16 3:51 p.m.•2 views

CVE-2025-62493 Heap out-of-bounds read in js_bigint_to_string1 in QuickJS

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

5.9CVSS6AI score0.00382EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2025/10/16 3:51 p.m.•11 views

CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS6AI score0.00382EPSS
SaveExploits1
Rows per page
Query Builder