CVE-2026-3979

CVE-2026-3979 affects quickjs-ng/quickjs up to 0.12.1. The issue is in the function js_iterator_concat_return in quickjs.c, enabling a use-after-free condition. Exploitation requires local access, and a public exploit has been published. A patch is available (patch name: daab4ad4bae4ef071ed029461...

QuickJS resource management error vulnerability

QuickJS is a small and embeddable JavaScript engine developed by the QuickJS open-source project. Versions of QuickJS prior to 0.11.0 contained a resource management vulnerability, which stemmed from incorrect handling of the file quickjs.c. This vulnerability could lead to reusing resources afte...

CVE-2023-31922

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

UBUNTU-CVE-2024-13903

A vulnerability was found in quickjs-ng QuickJS up to 0.8.0. It has been declared as problematic. Affected by this vulnerability is the function JSGetRuntime of the file quickjs.c of the component qjs. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely...

Improper Check For Unusual Or Exceptional Conditions

libquickjs.so is vulnerable to Improper Check For Unusual Or Exceptional Conditions. The vulnerability is due to an assertion failure via JSFreeRuntimeJSRuntime at quickjs.c, which results in an application crash...

CVE-2023-31922

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

Stack overflow

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...

CVE-2020-22876

Buffer Overflow vulnerability in quickjs.c in QuickJS, allows remote attackers to cause denial of service. This issue is resolved in the 2020-07-05 release...

CVE-2020-22876

CVE-2020-22876 relates to a buffer overflow in QuickJS (source: quickjs.c). The vulnerability allows remote denial of service via a crafted input and is mitigated by a fix released on 2020-07-05. Affected component is the QuickJS engine; root cause is a buffer overflow in quickjs.c leading to mem...