CVE-2025-71470

MicroQuickJS (mquickjs ) versions prior to commit 99eed3f are susceptible to an out-of-bounds read vulnerability. The root cause occurs because the JS_Call() function raises exceptions during frame setup without correctly updating ctx->sp and ctx->fp . An attacker can provide JavaScript tha...

quickjs:fuzz_compile: Use-of-uninitialized-value in build_backtrace

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4731949466845184 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...

quickjs:fuzz_eval: Use-of-uninitialized-value in build_backtrace

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=6545928146190336 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzeval Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...

quickjs:fuzz_eval: Use-of-uninitialized-value in build_backtrace

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=5072297926721536 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzeval Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...

quickjs:fuzz_compile: Use-of-uninitialized-value in build_backtrace

Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=6033744751886336 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...