CVE-2026-88378

The QuickJS engine (commit 04be24600 ) contains a heap out-of-bounds write vulnerability within the JS_ReadFunctionTag() function. While the technical cause is identified as an out-of-bounds write, specific exploitation details or in-the-wild exploit links are not provided in the documentation. R...

EUVD-2026-86272

QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...