Skip to content
OpenAdvisories

Package · Debian

quickjs-ng

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2026-120439

    QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sort

    QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() in quickjs.c that allows attackers to cause a heap buffer overflow on 32-bit hosts. Attackers who can run JavaScript can call TypedArray.prototype.sort with a comparator on a typed…

    quickjs-ng QuickJS-NG quickjs-ng quickjs-ng Debian Ubuntu
  • High 7.8
    CVE-2026-120438

    QuickJS-NG before 0.16.0 Heap Buffer Overflow via Proxy ownKeys Enumeration

    QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the…

    quickjs-ng QuickJS-NG quickjs-ng quickjs-ng Debian Ubuntu