TI-2025-11681 CVE-2025-12745 · GHSA-rw7h-fw9j-wrgx
QuickJS quickjs.c js_array_buffer_slice buffer over-read
Priority MEDIUM 55
A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c.
Vulnerabilities
3 records
TI-2025-29365 CVE-2025-46687 · GHSA-hrc5-3jpv-g9x2
Resource allocation without limits in QuickJS
Priority HIGH 67
quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow.
TI-2024-21990 CVE-2024-33263 · GHSA-wq4j-f7v3-vfpp
QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.
Priority LOW 19
QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c.