23 matches found
CVE-2026-119332
Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup in Libraries/LibJS/Runtime/FinalizationRegistry.cpp removed a dead record from mrecords, retained an iterator to the next FinalizationRecord, and then invoked...
CVE-2026-119332: LadybirdBrowser ladybird: Ladybird is a truly independent web browser
Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup in Libraries/LibJS/Runtime/FinalizationRegistry.cpp removed a dead record from mrecords, retained an iterator to the next FinalizationRecord, and then invoked...
Malicious code in libjs-cqs (npm)
Source: amazon-inspector aed1ca0473a0b4d14330082b90a8fa15e7f1dfc671361ad4ef8c2dac38b130b0 The package libjs-cqs was found to contain malicious code. --- Credit: OpenSSF source...
Ladybird LibJS Code Execution
The vulnerability of the npm library for web development, LibJS, in the Ladybird web browser, is related to synchronization errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created JS file...
Malicious code in libjs-cqs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed1ca0473a0b4d14330082b90a8fa15e7f1dfc671361ad4ef8c2dac38b130b0 The package libjs-cqs was found to contain malicious code...
MAL-2026-1770 Malicious code in libjs-cqs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed1ca0473a0b4d14330082b90a8fa15e7f1dfc671361ad4ef8c2dac38b130b0 The package libjs-cqs was found to contain malicious code...
EUVD-2025-14653
Malicious code in bioql PyPI...
CVE-2025-47154
LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that argumentslist references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for u...
CVE-2025-47154
LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that argumentslist references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for u...
CVE-2025-47154
CVE-2025-47154 affects the LibJS component of the Ladybird browser, specifically versions prior to f5a6704. The root cause is improper freeing of the vector referenced by arguments_list, causing a use-after-free. This can allow remote attackers to execute arbitrary code by feeding a crafted .js f...
CVE-2025-47154
LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that argumentslist references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for u...
CVE-2025-47154
LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that argumentslist references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for u...
CVE-2025-47154: Missing Synchronization
LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that argumentslist references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for u...
CVE-2025-47154
LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that argumentslist references, leading to a use-after-free, and allowing remote attackers to execute arbitrary code via a crafted .js file. NOTE: the GitHub README says "Ladybird is in a pre-alpha state, and only suitable for u...
Ubuntu 16.04 ESM : semver vulnerability (USN-4776-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4776-1 advisory. It was discovered that semver incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service. Tenable has...
Integer overflow
A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializetypedarrayfromarraybuffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the publ...
CVE-2021-4327
CVE-2021-4327 (SerenityOS) affects SerenityOS, specifically the function initialize_typed_array_from_array_buffer in Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The vulnerability is an integer overflow, with the patch identified as f6c6047e49f1517778f5565681fb64750b14bf60. The exploit has be...
CVE-2021-4327 SerenityOS TypedArray.cpp initialize_typed_array_from_array_buffer integer overflow
A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializetypedarrayfromarraybuffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the publ...
CVE-2021-4327
A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializetypedarrayfromarraybuffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the publ...
CVE-2021-4327: Integer Overflow or Wraparound
A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializetypedarrayfromarraybuffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the publ...