CVE-2023-48183

CVE-2023-48183 affects QuickJS prior to commit c4cdd61. The vulnerability stems from an erroneous lexical scope of the value of this with eval, causing a NULL pointer dereference in build_for_in_iterator. Documented impact includes possible crashes/denial of service and potential arbitrary code e...

CVE-2023-48184

CVE-2023-48184 affects QuickJS before 7414e5f, where a use-after-free in JS_FreeValueRT arises from incorrect garbage collection of async functions with closures. Multiple connected sources (Red Hat, Debian/OSV entries, Ubuntu USN, and Nessus) document the issue and reference unpatched status in ...