quickjs vulnerabilities (Debian)
21 vulnerabilities.
-
quickjsDebian QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag(). 9.8 Critical -
quickjsDebian A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit... 7.5 High -
quickjsDebian A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09... 6.5 Medium -
quickjsDebian quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow 5.3 Medium -
quickjsDebian quickjs-ng quickjs Atomics Ops quickjs.c use after free 5.3 Medium -
quickjsDebian quickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflow 5.3 Medium -
quickjsDebian quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow 6.9 Medium -
quickjsDebian QuickJS quickjs.c js_array_buffer_slice buffer over-read 4.8 Medium -
quickjsDebian Integer overflow in js_bigint_from_string in QuickJS 7.1 High -
quickjsDebian Type confusion in string addition in QuickJS 7.1 High -
quickjsDebian Type confusion in string addition in QuickJS 7.1 High -
quickjsDebian Heap out-of-bounds read in js_bigint_to_string1 in QuickJS 5.9 Medium -
quickjsDebian Heap out-of-bounds read in js_typed_array_indexOf in QuickJS 5.9 Medium -
quickjsDebian Use-after-free in js_std_promise_rejection_check in QuickJS 8.8 High -
quickjsDebian Use-after-free in js_print_object in QuickJS 8.8 High -
quickjsDebian quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading... 5.6 Medium -
quickjsDebian quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a... 5.6 Medium -
quickjsDebian quickjs-ng QuickJS qjs quickjs.c JS_GetRuntime stack-based overflow 5.3 Medium -
quickjsDebian QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime... 4.0 Medium -
quickjsDebian QuickJS before 7414e5f has a quickjs.h JS_FreeValueRT use-after-free because of incorrect garbage... 3.9 Low -
quickjsDebian QuickJS before c4cdd61 has a build_for_in_iterator NULL pointer dereference because of an... 7.5 High