339 matches found
CVE-2023-48184
QuickJS before 7414e5f has a quickjs.h JSFreeValueRT use-after-free because of incorrect garbage collection of async functions with closures...
CVE-2023-48183
QuickJS before c4cdd61 has a buildforiniterator NULL pointer dereference because of an erroneous lexical scope of "this" with eval...
PT-2024-13553 · Quickjs +2 · Quickjs +2
Name of the Vulnerable Software and Affected Versions: QuickJS versions prior to c4cdd61 Description: The issue is caused by a NULL pointer dereference due to an erroneous lexical scope of this with eval, leading to a build for in iterator error. Recommendations: For versions prior to c4cdd61,...
CVE-2023-48183
QuickJS before c4cdd61 has a buildforiniterator NULL pointer dereference because of an erroneous lexical scope of "this" with eval...
CVE-2023-48183
QuickJS before c4cdd61 has a buildforiniterator NULL pointer dereference because of an erroneous lexical scope of "this" with eval...
CVE-2023-48184
QuickJS before 7414e5f has a quickjs.h JSFreeValueRT use-after-free because of incorrect garbage collection of async functions with closures...
PT-2023-35670 · Git +1 · Quickjs
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include a crash state involving js free function def, js parse function decl...
Denial Of Service (DoS)
quickjs is vulnerable to Denial Of Service DoS. The vulnerability exists due to the stack-overflow in the jsproxyisArray component at quickjs.c, allowing an attacker to cause an application crash...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow via the component jsproxyisArray. Remediation Upgrade quickjs to version 2024-01-13 or higher. References - GitHub Issue Credit: @Ye0nny @EJueon of the seclab-yonsei...
CVE-2023-31922
QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...
CVE-2023-31922
QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...
Stack overflow
QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...
CVE-2023-31922
CVE-2023-31922 affects QuickJS, specifically the js_proxy_isArray path in quickjs.c, where a stack overflow can trigger a crash. The issue is tied to commit 2788d71. Public docs indicate a DoS/crash impact but do not provide exploitation details. Remediation mentioned in the sources includes upgr...
CVE-2023-31922
QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...
QuickJS 缓冲区错误漏洞
QuickJS is a small and embeddable Javascript engine. A security vulnerability exists in QuickJS, which is caused by a stack overflow...
PT-2023-23523 · Quickjs · Quickjs
Name of the Vulnerable Software and Affected Versions: QuickJS version 2788d71 Description: A stack-overflow issue was discovered in QuickJS via the js proxy isArray component at quickjs.c. Recommendations: For QuickJS version 2788d71, consider disabling the js proxy isArray function as a tempora...
CVE-2023-31922
QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...
CVE-2023-31922
QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component jsproxyisArray at quickjs.c...
PT-2022-37180 · Git +1 · Quickjs
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions find jump target, resolve labels, and ...