Lucene search
+L

201 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/17 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-62493

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digit...

6.5CVSS5.8AI score0.00356EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/10/17 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-62496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessive...

8.8CVSS6AI score0.00447EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/16 6:30 p.m.11 views

EUVD-2025-34781

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

5.9CVSS5.9AI score0.00356EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/16 6:30 p.m.10 views

EUVD-2025-34778

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

7.1CVSS6.6AI score0.00447EPSS
SaveExploits1References3
Snyk
Snyk
added 2025/10/16 4:42 p.m.4 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the jsbiginttostring1 function. An attacker can access sensitive information from adjacent heap memory by triggering a crafted BigInt conversion that causes the engine to read beyond the allocated buffer...

6.8CVSS5.9AI score0.00356EPSS
SaveExploits1References2
OSV
OSV
added 2025/10/16 4:15 p.m.8 views

DEBIAN-CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS5.6AI score0.00447EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/16 4:15 p.m.38 views

CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS5.9AI score
SaveExploits0References2
NVD
NVD
added 2025/10/16 4:15 p.m.12 views

CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS0.00447EPSS
SaveExploits1References2
NVD
NVD
added 2025/10/16 4:15 p.m.13 views

CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS0.00356EPSS
SaveExploits1References2
OSV
OSV
added 2025/10/16 4:15 p.m.7 views

CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS5.9AI score
SaveExploits0References2
OSV
OSV
added 2025/10/16 4:15 p.m.5 views

DEBIAN-CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS5.4AI score0.00356EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/16 4:15 p.m.8 views

UBUNTU-CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS6AI score0.00447EPSS
SaveExploits1References4
OSV
OSV
added 2025/10/16 4:15 p.m.8 views

UBUNTU-CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS5.8AI score0.00356EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/10/16 3:52 p.m.4 views

CVE-2025-62496 Integer overflow in js_bigint_from_string in QuickJS

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

7.1CVSS6.8AI score0.00447EPSS
SaveExploits1References2
CVE
CVE
added 2025/10/16 3:52 p.m.37 views

CVE-2025-62496

The CVE refers to QuickJS: BigInt parsing in js_bigint_from_string. When converting a decimal string with an extremely large number of digits, the code computes n_bits as (n_digits × 27 + 7) / 8. For very large inputs (e.g., tens of millions of digits), this intermediate value overflows a 32-bit ...

8.8CVSS6.8AI score0.00447EPSS
SaveExploits1References2Affected Software1
AlpineLinux
AlpineLinux
added 2025/10/16 3:52 p.m.8 views

CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS6.8AI score0.00447EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/10/16 3:52 p.m.16 views

CVE-2025-62496 Integer overflow in js_bigint_from_string in QuickJS

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

7.1CVSS0.00447EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2025/10/16 3:52 p.m.12 views

CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...

8.8CVSS5.6AI score0.00447EPSS
SaveExploits1
Cvelist
Cvelist
added 2025/10/16 3:51 p.m.16 views

CVE-2025-62493 Heap out-of-bounds read in js_bigint_to_string1 in QuickJS

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

5.9CVSS0.00356EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/10/16 3:51 p.m.1 views

CVE-2025-62493 Heap out-of-bounds read in js_bigint_to_string1 in QuickJS

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

5.9CVSS6AI score0.00356EPSS
SaveExploits1References2
Rows per page
Query Builder