546 matches found
anamnesis-release
Anamnesis: LLM Exploit Generation Evaluation This repository contains the evaluation framework for studying how LLM agents generate exploits from vulnerability reports in the presence of exploit mitigations. Given a bug report and proof-of-concept trigger, agents analyze vulnerable software and...
CVE-2026-120438
QuickJS-NG before 0.16.0 contains an integer overflow in jsproxygetownpropertynames in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the allocation size, causing crashes or potentia...
CVE-2026-120439
QuickJS-NG before 0.16.0 contains an integer overflow in jstypedarraysort in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can call TypedArray.prototype.sort with a comparator on a typed array near 2^30 elements, wrapping the...
CVE-2026-120438
A flaw was found in QuickJS-NG. This vulnerability allows an attacker executing JavaScript code to potentially achieve arbitrary code execution or cause a denial of service DoS through an application crash. The issue occurs due to an integer overflow during proxy property enumeration on 32-bit...
CVE-2026-120440
A flaw was found in QuickJS-NG. This vulnerability allows an attacker capable of running JavaScript code to cause a Denial of Service DoS through memory exhaustion. The issue occurs when the JavaScript engine fails to release allocated memory upon encountering an error during atomic storage...
CVE-2026-120440
QuickJS-NG before 0.16.0 contains a memory leak vulnerability in jsatomicsstore in quickjs.c that fails to free the converted value when returning a RangeError. Attackers running JavaScript can repeatedly call Atomics.store with a valueOf that detaches or shrinks the buffer to exhaust heap memory...
DEBIAN-CVE-2026-120439
QuickJS-NG before 0.16.0 contains an integer overflow in jstypedarraysort in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can call TypedArray.prototype.sort with a comparator on a typed array near 2^30 elements, wrapping the...
CVE-2026-120438
QuickJS-NG before 0.16.0 contains an integer overflow in jsproxygetownpropertynames in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the allocation size, causing crashes or potentia...
CVE-2026-120439
QuickJS-NG before 0.16.0 contains an integer overflow in jstypedarraysort in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can call TypedArray.prototype.sort with a comparator on a typed array near 2^30 elements, wrapping the...
CVE-2026-120439
QuickJS-NG before 0.16.0 contains an integer overflow in jstypedarraysort in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can call TypedArray.prototype.sort with a comparator on a typed array near 2^30 elements, wrapping the...
CVE-2026-120438
QuickJS-NG before 0.16.0 contains an integer overflow in jsproxygetownpropertynames in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the allocation size, causing crashes or potentia...
CVE-2026-120440 QuickJS-NG before 0.16.0 Memory Leak via Atomics.store
QuickJS-NG before 0.16.0 contains a memory leak vulnerability in jsatomicsstore in quickjs.c that fails to free the converted value when returning a RangeError. Attackers running JavaScript can repeatedly call Atomics.store with a valueOf that detaches or shrinks the buffer to exhaust heap memory...
EUVD-2026-115200
QuickJS-NG before 0.16.0 contains a memory leak vulnerability in jsatomicsstore in quickjs.c that fails to free the converted value when returning a RangeError. Attackers running JavaScript can repeatedly call Atomics.store with a valueOf that detaches or shrinks the buffer to exhaust heap memory...
CVE-2026-120440 QuickJS-NG before 0.16.0 Memory Leak via Atomics.store
QuickJS-NG before 0.16.0 contains a memory leak vulnerability in jsatomicsstore in quickjs.c that fails to free the converted value when returning a RangeError. Attackers running JavaScript can repeatedly call Atomics.store with a valueOf that detaches or shrinks the buffer to exhaust heap memory...
CVE-2026-120440 QuickJS-NG before 0.16.0 Memory Leak via Atomics.store
QuickJS-NG before 0.16.0 contains a memory leak vulnerability in jsatomicsstore in quickjs.c that fails to free the converted value when returning a RangeError. Attackers running JavaScript can repeatedly call Atomics.store with a valueOf that detaches or shrinks the buffer to exhaust heap memory...
CVE-2026-120440
QuickJS-NG versions prior to 0.16.0 are vulnerable to a memory leak in the js_atomics_store() function within quickjs.c. The vulnerability occurs because the engine fails to free a converted value when returning a RangeError . An attacker executing JavaScript can trigger this leak by repeatedly c...
CVE-2026-120439 QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sort
QuickJS-NG before 0.16.0 contains an integer overflow in jstypedarraysort in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can call TypedArray.prototype.sort with a comparator on a typed array near 2^30 elements, wrapping the...
CVE-2026-120439
QuickJS-NG versions before 0.16.0 are vulnerable to a heap buffer overflow on 32-bit hosts due to an integer overflow in the js_typed_array_sort() function within quickjs.c. An attacker capable of running JavaScript can trigger this by calling TypedArray.prototype.sort with a comparator on a type...
CVE-2026-120439 QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sort
QuickJS-NG before 0.16.0 contains an integer overflow in jstypedarraysort in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can call TypedArray.prototype.sort with a comparator on a typed array near 2^30 elements, wrapping the...
EUVD-2026-115199
QuickJS-NG before 0.16.0 contains an integer overflow in jstypedarraysort in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can call TypedArray.prototype.sort with a comparator on a typed array near 2^30 elements, wrapping the...