4 results · Feed
-
Medium 5.3
QuickJS-NG before 0.16.0 Memory Leak via Atomics.store
QuickJS-NG before 0.16.0 contains a memory leak vulnerability in js_atomics_store() in quickjs.c that fails to free the converted value when returning a RangeError. Attackers running JavaScript can repeatedly call Atomics.store with a valueOf that detaches or…
-
High 7.0
QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sort
QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can call TypedArray.prototype.sort with a comparator on a typed…
-
High 7.8
QuickJS-NG before 0.16.0 Heap Buffer Overflow via Proxy ownKeys Enumeration
QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the…
-
Critical 9.8
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().