EUVD-2025-211342

MicroQuickJS mquickjs before commit 99eed3f contains an out-of-bounds read vulnerability because JSCall raises exceptions during frame setup without updating ctx-sp and ctx-fp. Attackers can supply JavaScript that calls a non-function value, causing buildbacktrace to walk stale frame pointers and...

CVE-2025-71470

MicroQuickJS (mquickjs ) versions prior to commit 99eed3f are susceptible to an out-of-bounds read vulnerability. The root cause occurs because the JS_Call() function raises exceptions during frame setup without correctly updating ctx->sp and ctx->fp . An attacker can provide JavaScript tha...

MicroQuickJS security vulnerability

MicroQuickJS is a JavaScript library developed by Bellard’s individual developers. Versions of MicroQuickJS prior to 2026-01-15 contained security vulnerabilities. These vulnerabilities stemmed from defects in the getmblocksize function, which could lead to denial-of-service attacks...