CVE-2025-47154

LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that argumentslist references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for u...

PT-2025-18373 · Ladybird · Ladybird

Name of the Vulnerable Software and Affected Versions: Ladybird versions prior to f5a6704 Description: The issue is related to a use-after-free vulnerability in LibJS, which is part of the Ladybird browser engine. This vulnerability allows remote attackers to execute arbitrary code via a crafted...

Ladybird 安全漏洞

Ladybird is a truly standalone web browser from Ladybird Open Source. A security vulnerability exists in versions prior to Ladybird f5a6704, which stems from improper release of vectors referenced by argumentslist, which could lead to post-release reuse and arbitrary code execution...