Stack Overflow Vulnerability in QuickJS

QuickJS is a small and embeddable Javascript engine , it supports the ES2020 specification , including modules , asynchronous generators and proxies . QuickJS suffers from a stack overflow vulnerability that can be exploited to cause a program crash...

quickjs:fuzz_compile: Heap-buffer-overflow in set_object_name

Detailed Report: https://oss-fuzz.com/testcase?key=6040126542315520 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6160009e00a5 Crash State: setobjectname jsparseassignexpr...

quickjs:fuzz_compile: Heap-buffer-overflow in js_free_function_def

Detailed Report: https://oss-fuzz.com/testcase?key=4906679195140096 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7ff14d48563b Crash State: jsfreefunctiondef jscreatefunction...

quickjs:fuzz_compile: Heap-use-after-free in JS_DefineProperty

Detailed Report: https://oss-fuzz.com/testcase?key=5658108885204992 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanquickjs Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60900025f8e8 Crash State: JSDefineProperty buildbacktrace...

quickjs:fuzz_compile: Heap-buffer-overflow in js_parse_postfix_expr

Detailed Report: https://oss-fuzz.com/testcase?key=6261593842384896 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62c00003fd82 Crash State: jsparsepostfixexpr...

quickjs:fuzz_eval: Stack-buffer-overflow in get_class_atom

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5071407886368768 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzeval Job Type: aflasanquickjs Platform Id: linux Crash Type: Stack-buffer-overflow WRITE ...

quickjs:fuzz_compile: Heap-use-after-free in JS_ReadObjectRec

Project: https://github.com/horhof/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5676100190732288 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzcompile Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

quickjs:fuzz_eval: Heap-buffer-overflow in js_free_function_def

Detailed Report: https://oss-fuzz.com/testcase?key=5181144279810048 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzeval Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7f40b5b3d1e3 Crash State: jsfreefunctiondef...

quickjs:fuzz_regexp: Heap-buffer-overflow in re_parse_disjunction

Project: https://github.com/horhof/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5175204159684608 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzregexp Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

quickjs:fuzz_compile: Heap-use-after-free in JS_ReadObjectRec

Project: https://github.com/horhof/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4863930045562880 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzcompile Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

quickjs:fuzz_compile: Crash in js_parse_source_element

Project: https://github.com/horhof/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5192125542301696 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanquickjs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x620000050780 Crash State:...

quickjs:fuzz_regexp: Heap-buffer-overflow in re_parse_disjunction

Detailed Report: https://oss-fuzz.com/testcase?key=5730680467357696 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzregexp Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7f559109dea8 Crash State: reparsedisjunction reparseterm...

quickjs:fuzz_regexp: Stack-buffer-overflow in re_parse_term

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5682808761876480 Project: quickjs Fuzzing Engine: afl Fuzz Target: fuzzregexp Job Type: aflasanquickjs Platform Id: linux Crash Type: Stack-buffer-overflow READ...