Description
A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the function js_typed_array_constructor of the file quickjs.c. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called c5d80831e51e48a83eab16ea867be87f091783c5. A patch should be applied to remediate this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| quickjs-ng | quickjs | 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.10, 0.11.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | quickjs | No fix yet | — |
| Debian 13 | quickjs | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | quickjs | No fix yet | — |
| Ubuntu 25.10 | quickjs | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | quickjs | No fix yet | — |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | quickjs-ng | 0.11.0-r2 | — |
| Alpine v3.23 | quickjs-ng | 0.11.0-r1 | — |
References
- VDB-340355 | quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow vdb-entry technical-description
- VDB-340355 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #731780 | quickjs-ng quickjs v0.11.0 Heap-based Buffer Overflow third-party-advisory
- https://github.com/quickjs-ng/quickjs/issues/1296 issue-tracking
- https://github.com/quickjs-ng/quickjs/pull/1299 issue-tracking
- https://github.com/quickjs-ng/quickjs/issues/1296#issue-3780003395 exploit issue-tracking
- https://github.com/quickjs-ng/quickjs/commit/c5d80831e51e48a83eab16ea867be87f091783c5 patch
- https://github.com/quickjs-ng/quickjs/ product