quickjs-ng through 0.9.0 has a missing length check in JSReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...
7.8CVSS6.2AI score0.00282EPSS
SaveExploits1References1
CVE•added 1976/01/01 12:00 a.m.•16 views
CVE-2025-59672
CVE-2025-59672 entry is rejected/not used; not an active vulnerability entry.
