{"id":"OSV-2025-541","aliases":[],"status":"published","title":"Heap-buffer-overflow in js_create_function","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091578\n\n```\nCrash type: Heap-buffer-overflow READ 2\nCrash state:\njs_create_function\n__JS_EvalInternal\nJS_EvalObject\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-07-09T00:20:09.455729Z","modified":"2025-07-09T00:20:09Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"quickjs","ranges":[{"type":"GIT","events":[{"introduced":"f1b1c000c2a05972c1834f306786d2b41f767ef5"},{"fixed":"fa628f8c523ecac8ce560c081411e91fcaba2d20"}]}]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091578","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2025-541","title":"Heap-buffer-overflow in js_create_function","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091578\n\n```\nCrash type: Heap-buffer-overflow READ 2\nCrash state:\njs_create_function\n__JS_EvalInternal\nJS_EvalObject\n```\n","status":"published","published":"2025-07-09T00:20:09.455729Z","modified":"2025-07-09T00:20:09.45617Z","updated_at":"2026-11-02T15:52:49.981578Z"}]}}