Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-46687
5.6
MEDIUMCVSS v3
Published
April 27, 2025
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected.
quickjs-ng/quickjs
GitHubQuickJS, the Next Generation: a mighty JavaScript engine
GitHubQuickJS, the Next Generation: a mighty JavaScript engine< 2025-04-26, <= 0.9.0NVD
paralin/quickjsGitHubQuickJS, the Next Generation: a mighty JavaScript engine
GitHubQuickJS, the Next Generation: a mighty JavaScript engine< 2025-04-26, <= 0.9.0NVD