Quickjs Project vulnerabilities

Products

• Quickjs 14

Newest

• quickjs project quickjs A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit... CVE-2025-69654 7.5 HighMarch 6, 2026
• quickjs project quickjs A crafted JavaScript input can trigger an internal assertion failure in QuickJS release 2025-09... CVE-2025-69653 6.5 MediumMarch 6, 2026
• quickjs Integer overflow in js_bigint_from_string in QuickJS CVE-2025-62496 7.1 HighOctober 16, 2025
• quickjs Type confusion in string addition in QuickJS CVE-2025-62495 7.1 HighOctober 16, 2025
• quickjs Type confusion in string addition in QuickJS CVE-2025-62494 7.1 HighOctober 16, 2025
• quickjs Heap out-of-bounds read in js_bigint_to_string1 in QuickJS CVE-2025-62493 5.9 MediumOctober 16, 2025
• quickjs Heap out-of-bounds read in js_typed_array_indexOf in QuickJS CVE-2025-62492 5.9 MediumOctober 16, 2025
• quickjs Use-after-free in js_std_promise_rejection_check in QuickJS CVE-2025-62491 8.8 HighOctober 16, 2025
• quickjs Use-after-free in js_print_object in QuickJS CVE-2025-62490 8.8 HighOctober 16, 2025
• quickjs project quickjs quickjs-ng through 0.9.0 has an incorrect size calculation in JS_ReadBigInt for a BigInt, leading... CVE-2025-46688 Fix available 5.6 MediumApril 27, 2025
• quickjs project quickjs QuickJS before 7414e5f has a quickjs.h JS_FreeValueRT use-after-free because of incorrect garbage... CVE-2023-48184 Fix available 3.9 LowApril 23, 2024
• quickjs project quickjs QuickJS before c4cdd61 has a build_for_in_iterator NULL pointer dereference because of an... CVE-2023-48183 Fix available 7.5 HighApril 23, 2024
• quickjs project quickjs QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component... CVE-2023-31922 7.5 HighMay 12, 2023
• quickjs project quickjs Buffer Overflow vulnerability in quickjs.c in QuickJS, allows remote attackers to cause denial of... CVE-2020-22876 7.5 HighJuly 13, 2021