QP
Vendor
QuickJS Project
15
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-69653 | QU Quickjs Quickjs Project | 6.5 | Mar 6 | A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09-13, fixed in commit 1dbba8a88eaa40d15a8a9b70bb1a0b8fb5b552e6 (2025-12-11), in file… |
| CVE-2025-69654 | QU Quickjs Quickjs Project | 7.5 | Mar 6 | A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 (2025-12-11),`qjs` interpreter using the `-m`… |
| CVE-2025-62496 | QU Quickjs Quickjs Project | 8.8 | Oct 16 | Integer overflow in js_bigint_from_string in QuickJS |
| CVE-2025-62495 | QU Quickjs Quickjs Project | 8.8 | Oct 16 | Type confusion in string addition in QuickJS |
| CVE-2025-62494 | QU Quickjs Quickjs Project | 8.8 | Oct 16 | Type confusion in string addition in QuickJS |
| CVE-2025-62493 | QU Quickjs Quickjs Project | 6.5 | Oct 16 | Heap out-of-bounds read in js_bigint_to_string1 in QuickJS |
| CVE-2025-62492 | QU Quickjs Quickjs Project | 6.5 | Oct 16 | Heap out-of-bounds read in js_typed_array_indexOf in QuickJS |
| CVE-2025-62491 | QU Quickjs Quickjs Project | 8.8 | Oct 16 | Use-after-free in js_std_promise_rejection_check in QuickJS |
| CVE-2025-62490 | QU Quickjs Quickjs Project | 8.8 | Oct 16 | Use-after-free in js_print_object in QuickJS |
| CVE-2025-46688 | QU QuickJS QuickJS Project | 8.4 | Apr 27 | quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading to a heap-based buffer overflow |
| CVE-2025-46687 | QU QuickJS QuickJS Project | 7.8 | Apr 27 | quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow |
| CVE-2023-48184 | QU Quickjs Quickjs Project | 3.9 | Apr 23 | QuickJS before 7414e5f has a quickjs.h JS_FreeValueRT use-after-free because of incorrect garbage collection of async functions with closures |
| CVE-2023-48183 | QU Quickjs Quickjs Project | 7.5 | Apr 23 | QuickJS before c4cdd61 has a build_for_in_iterator NULL pointer dereference because of an erroneous lexical scope of "this" with eval |
| CVE-2023-31922 | QU Quickjs Quickjs Project | 7.5 | May 12 | QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component js_proxy_isArray at quickjs.c |
| CVE-2020-22876 | QU Quickjs Quickjs Project | 7.5 | Jul 13 | Buffer Overflow vulnerability in quickjs.c in QuickJS, allows remote attackers to cause denial of service |