TI-2025-29365 CVE-2025-46687 · GHSA-hrc5-3jpv-g9x2
Resource allocation without limits in QuickJS
Priority HIGH 67
quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow.
Bellard
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Bellard records in CISA KEVNo Bellard vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Quickjs · all components
TI-2025-11681 CVE-2025-12745 · GHSA-rw7h-fw9j-wrgx
QuickJS quickjs.c js_array_buffer_slice buffer over-read
Priority MEDIUM 55
A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c.
TI-2024-21990 CVE-2024-33263 · GHSA-wq4j-f7v3-vfpp
QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.
Priority LOW 19
QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.