Quickjs

quickjs

Vendor: Bellard • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-12745 1Bellard 1Quickjs Apr 29, 2026 Nov 5, 2025 1.9 LOW· v4 7.8 HIGH· v3 4.3 MEDIUM· v2 A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function js_array_buffer_slice of the file quickjs.c. This manipulation causes buffer over-read. The attack is re...Show more A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function js_array_buffer_slice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited. This product adopts a rolling release strategy to maintain continuous delivery Patch name: c6fe5a98fd3ef3b7064e6e0145dfebfe12449fea. To fix this issue, it is recommended to deploy a patch.Show less
CVE-2025-46687 2Bellard Quickjs Ng 2Quickjs Quickjs Jan 14, 2026 Apr 27, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected.
CVE-2024-33263 1Bellard 1Quickjs Sep 22, 2025 May 14, 2024 N/A· v4 4.0 MEDIUM· v3 N/A· v2 QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.