CVE-2025-69653

CVE-2025-69653 affects QuickJS: when using the qjs interpreter with the -m option, a crafted JavaScript input can trigger an internal assertion in gc_decref_child (quickjs.c), causing an abort (SIGABRT) during garbage collection and a denial‑of‑service. The issue is fixed in commit 1dbba8a88eaa40...

CVE-2025-69654

CVE-2025-69654 concerns the QuickJS qjs interpreter. A crafted JavaScript input, when run with the -m option and a low memory limit on the QuickJS release 2025-09-13, can cause an out-of-memory condition followed by an assertion failure in JS_FreeRuntime (list_empty(&rt->gc_obj_list)) during r...