Skip to content
OpenAdvisories

Package · Debian

quickjs-ng

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-120440

    QuickJS-NG before 0.16.0 Memory Leak via Atomics.store

    QuickJS-NG before 0.16.0 contains a memory leak vulnerability in js_atomics_store() in quickjs.c that fails to free the converted value when returning a RangeError. Attackers running JavaScript can repeatedly call Atomics.store with a valueOf that detaches or…

    quickjs-ng QuickJS-NG quickjs-ng quickjs-ng Debian Ubuntu