Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 2026/01/19 10:29 a.m.4 views

CVE-2026-1145

A flaw was found in quickjs-ng quickjs. This vulnerability, a heap-based buffer overflow, exists in the jstypedarrayconstructorta function. A remote attacker can exploit this by sending specially crafted input, which could lead to unauthorized information disclosure or system instability denial o...

8.8CVSS6.7AI score0.00156EPSS
Exploits1References10
NVD
NVD
added 2026/01/19 9:16 a.m.2 views

CVE-2026-1145

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

8.8CVSS0.00156EPSS
Exploits1References8
Vulnrichment
Vulnrichment
added 2026/01/19 8:2 a.m.3 views

CVE-2026-1145 quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

7.5CVSS6.6AI score0.00156EPSS
Exploits1References8
ATTACKERKB
ATTACKERKB
added 2026/01/19 8:2 a.m.2 views

CVE-2026-1145

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

8.8CVSS5.8AI score0.00156EPSS
Exploits1References7Affected Software1
Cvelist
Cvelist
added 2026/01/19 8:2 a.m.20 views

CVE-2026-1145 quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

7.5CVSS0.00156EPSS
Exploits1References8
CVE
CVE
added 2026/01/19 8:2 a.m.8 views

CVE-2026-1145

CVE-2026-1145 affects quickjs-ng/quickjs up to version 0.11.0. The vulnerability resides in js_typed_array_constructor_ta in quickjs.c, enabling a heap-based buffer overflow that can be triggered remotely. Exploitation has been published; patch 53aebe66170d545bb6265906fe4324e4477de8b4 is availabl...

8.8CVSS6.7AI score0.00156EPSS
Exploits1References8Affected Software1
AlpineLinux
AlpineLinux
added 2026/01/19 8:2 a.m.2 views

CVE-2026-1145

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

8.8CVSS6.7AI score0.00156EPSS
Exploits1References8
CNNVD
CNNVD
added 2026/01/19 12:0 a.m.1 views

QuickJS security vulnerabilities

QuickJS is a small and embeddable JavaScript engine developed by the QuickJS open-source project. Versions of QuickJS prior to 0.11.0 contain security vulnerabilities. These vulnerabilities stem from incorrect operations on the function jstypedarrayconstructorta in the file quickjs.c, which may...

8.8CVSS6.8AI score0.00156EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2026/01/11 7:33 a.m.3 views

CVE-2026-0821

A flaw was found in quickjs-ng. A remote attacker can exploit a heap-based buffer overflow vulnerability in the jstypedarrayconstructor function of the quickjs.c file by executing a specially crafted manipulation. This vulnerability may lead to information disclosure, denial of service, or...

9.8CVSS7.4AI score0.00173EPSS
Exploits1References10
NVD
NVD
added 2026/01/10 1:15 p.m.2 views

CVE-2026-0821

A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function jstypedarrayconstructor of the file quickjs.c. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed a...

9.8CVSS0.00173EPSS
Exploits1References8
Vulnrichment
Vulnrichment
added 2026/01/10 1:2 p.m.2 views

CVE-2026-0821 quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow

A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function jstypedarrayconstructor of the file quickjs.c. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed a...

7.5CVSS6.8AI score0.00173EPSS
Exploits1References8
CVE
CVE
added 2026/01/10 1:2 p.m.12 views

CVE-2026-0821

The CVE-2026-0821 issue affects quickjs-ng/quickjs up to 0.11.0, specifically the js_typed_array_constructor in quickjs.c. The vulnerability enables a heap-based buffer overflow and can be exploited remotely. A publicly disclosed exploit exists. A patch is available (hash: c5d80831e51e48a83eab16e...

9.8CVSS6.8AI score0.00173EPSS
Exploits1References8Affected Software1
AlpineLinux
AlpineLinux
added 2026/01/10 1:2 p.m.2 views

CVE-2026-0821

A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function jstypedarrayconstructor of the file quickjs.c. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed a...

9.8CVSS7AI score0.00173EPSS
Exploits1References8
Cvelist
Cvelist
added 2026/01/10 1:2 p.m.23 views

CVE-2026-0821 quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow

A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function jstypedarrayconstructor of the file quickjs.c. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed a...

7.5CVSS0.00173EPSS
Exploits1References8
EUVD
EUVD
added 2026/01/10 1:2 p.m.3 views

EUVD-2026-1843

A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function jstypedarrayconstructor of the file quickjs.c. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed a...

7.5CVSS7.5AI score0.00173EPSS
Exploits1References8
CNNVD
CNNVD
added 2026/01/10 12:0 a.m.2 views

QuickJS 安全漏洞

QuickJS is QuickJS open source a small and embeddable Javascript engine . A security vulnerability exists in QuickJS 0.11.0 and earlier versions, which is caused by a heap buffer overflow in the function jstypedarrayconstructor in the file quickjs.c, which could lead to the execution of arbitrary...

9.8CVSS7.6AI score0.00173EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2026/01/10 12:0 a.m.3 views

PT-2026-2027

Name of the Vulnerable Software and Affected Versions quickjs-ng versions up to 0.11.0 Description A flaw exists in quickjs-ng up to version 0.11.0 due to a heap-based buffer overflow in the js typed array constructor function within the quickjs.c file. This issue can be triggered remotely throug...

7.5CVSS7.4AI score0.00173EPSS
Exploits1References12
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-44468

Malicious code in bioql PyPI...

6.5CVSS7AI score0.00573EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 11:45 p.m.7 views

CVE-2022-41259

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use an ARRAY constructor...

6.5CVSS7.2AI score0.00573EPSS
Exploits0References1
OSV
OSV
added 2022/11/08 10:15 p.m.1 views

CVE-2022-41259

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use an ARRAY constructor...

6.5CVSS5.8AI score0.00573EPSS
Exploits0References2
Rows per page
Query Builder