QuickJS 安全漏洞

QuickJS is a small and embeddable Javascript engine open-sourced by QuickJS. A security vulnerability exists in QuickJS 0.9.0 and earlier versions, which stems from a lack of length checking in JSReadString, and may result in a heap buffer overflow...

The vulnerability of the gguf_fread_str function in the GGUF library, which allows a hacker to execute arbitrary code.

The vulnerability of the gguffreadstr function in the GGUF library is related to integer overflow. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...