Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c.

Published Aug 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre