quickjs-ng through 0.9.0 has an incorrect size calculation in JSReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...
8.4CVSS6.1AI score0.00309EPSS
SaveExploits1References8
AlpineLinux•added 2025/04/27 12:0 a.m.•7 views
CVE-2025-46688
quickjs-ng through 0.9.0 has an incorrect size calculation in JSReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...
