Quickjs
Quickjs-NG · 8 CVEs
quickjs-ng quickjs quickjs.c js_iterator_concat_return use after free
Mar 12, 2026
quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow
Jan 19, 2026
quickjs-ng quickjs Atomics Ops quickjs.c use after free
Jan 19, 2026
quickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflow
Jan 10, 2026
quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow
Jan 10, 2026
quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffe…
Apr 27, 2025
quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overf…
Apr 27, 2025
quickjs-ng QuickJS qjs quickjs.c JS_GetRuntime stack-based overflow
Mar 21, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-3979 | quickjs-ng quickjs quickjs.c js_iterator_concat_return use after free | MEDIUM | 0.16% | Mar 12, 2026 |
| CVE-2026-1145 | quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow | MEDIUM | 0.40% | Jan 19, 2026 |
| CVE-2026-1144 | quickjs-ng quickjs Atomics Ops quickjs.c use after free | MEDIUM | 0.41% | Jan 19, 2026 |
| CVE-2026-0822 | quickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflow | MEDIUM | 0.46% | Jan 10, 2026 |
| CVE-2026-0821 | quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow | MEDIUM | 0.50% | Jan 10, 2026 |
| CVE-2025-46688 | quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is… | HIGH | 0.32% | Apr 27, 2025 |
| CVE-2025-46687 | quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also a… | HIGH | 0.30% | Apr 27, 2025 |
| CVE-2024-13903 | quickjs-ng QuickJS qjs quickjs.c JS_GetRuntime stack-based overflow | MEDIUM | 0.70% | Mar 21, 2025 |
Showing 1 to 8 of 8 CVEs