quickjs:fuzz_compile: Heap-buffer-overflow in js_create_function

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4814325405319168 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type:...

quickjs:fuzz_eval: Use-of-uninitialized-value in build_backtrace

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5072297926721536 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzeval Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the component jsproxyisArray. Remediation Upgrade quickjs to version 2024-01-13 or higher. References - GitHub Issue Credit: @Ye0nny @EJueon of the seclab-yonsei...

CVE-2023-31922

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

CVE-2023-31922

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

Stack overflow

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

QuickJS buffer error vulnerability

QuickJS is a small and embeddable Javascript engine. A security vulnerability exists in QuickJS, which is caused by a stack overflow...

CVE-2023-31922: Out-of-bounds Write

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

CVE-2023-31922

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

CVE-2023-31922

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

CVE-2023-31922

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

CVE-2023-31922

CVE-2023-31922 affects QuickJS, specifically the js_proxy_isArray path in quickjs.c, where a stack overflow can trigger a crash. The issue is tied to commit 2788d71. Public docs indicate a DoS/crash impact but do not provide exploitation details. Remediation mentioned in the sources includes upgr...

PT-2023-23523 · Quickjs · Quickjs

Name of the Vulnerable Software and Affected Versions: QuickJS version 2788d71 Description: A stack-overflow issue was discovered in QuickJS via the js proxy isArray component at quickjs.c. Recommendations: For QuickJS version 2788d71, consider disabling the js proxy isArray function as a tempora...

CVE-2023-31922

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

quickjs:fuzz_compile: Heap-buffer-overflow in js_free_function_def

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=6723088457007104 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type:...

PT-2022-37180 · Git +1 · Quickjs

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions find jump target, resolve labels, and ...

quickjs:fuzz_eval: Heap-buffer-overflow in find_jump_target

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5677202523422720 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzeval Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type:...

quickjs:fuzz_eval: Heap-buffer-overflow in emit_goto

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4594530084585472 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzeval Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type:...

quickjs:fuzz_regexp: Heap-buffer-overflow in re_parse_disjunction

Detailed Report: https://oss-fuzz.com/testcase?key=6405049668993024 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzregexp Job Type: libfuzzerasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61800002c3b9 Crash State: reparsedisjunction lrecompil...

quickjs:fuzz_compile: Use-of-uninitialized-value in build_backtrace

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=6033744751886336 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...