harfbuzz-stch-oob-write

HarfBuzz applystch — Integer Overflow → Heap OOB Write Cra...

CVE-2025-62496

A vulnerability exists in the QuickJS engine's BigInt string parsing logic jsbigintfromstring when attempting to create a BigInt from a string with an excessively large number of digits. The function calculates the necessary number of bits nbits required to store the BigInt using the formula:...